How can we monitor registry modification to protect system security ?, Monitoring System Security

How can we monitor registry modification to protect system security ?, Monitoring System Security

We all know that once the registry is modified incorrectly, the system will have a problem. To solve this problem, let the system record our modifications to the Registry. If a problem occurs after the registry is modified, we can check the modification records to determine whether the registry is a problem or which registry is modified.

Press the shortcut key win + r to open the run dialog box.

Enter regedit and click "OK" to open the registry.

Locate a metric you want to monitor.

Right-click the item and select the permission

Click Advanced.

On the advanced panel, select audit.

Click Add.

Enter the user group name, such as everyone, as shown in the following figure. This setting means that the computer records the changes made to the registry by the everyone user group. Click OK to complete the settings.

Click Start> restart. In this way, the settings are started.

For details about how to view Registry Modification, refer to Baidu experience "how to view Registry Modification records".