How does the Process Monitor monitoring progress Operation registry be implemented?

Http://zhidao.baidu.com/link?url=Kqav4qkQSprC5FnpHPOGJvhqvY9fJ9-Vdx9g_ SWH4W5VOUSDRJO4VL7QIDRG4LWRJVRAB9S9UIPTVOGP7NJVLGIXIAXWWJQZ5LP0TX_IXYCHow does the Process Monitor monitoring progress Operation registry be implemented? Report | Share | 2014-09-14 14:485203751 | Browse 1092 times Operating System

Process Monitor This tool is a tool for Microsoft to monitor the process registry operations, files and other operations, is Regmon+filemon by Microsoft after the acquisition of a combination of the re-written. Generally we monitor the process operation of the registry only need to simply hang a global hook DLL can be implemented, or write a registry driver can also. and process Monitor only one exe, no DLL, also wood has sys, how do you realize the monitoring process function? Does Microsoft have an open interface that can only be used internally?

I have a better answer.Sort By default | Sort by Time 2 answers2014-12-31 15:24 Fish in the sky 2040 | First level 1, after the installation process began, open process Monitor;
2, click the filter icon in the toolbar, in the Popup Process moniter Filter window, first remove the contents of the list;
3, in the selection process name is your Setup program name, tick includ, click Add, the following list box to see the green tick icon indicates that the addition succeeded, click the OK button;
4, this time will be in the Monitor's main window display monitoring information, you can use the register to display only the registry information;
5, the implementation of the installation process, registry modification information will be recorded.
Note: Remember to highlight the Capture button on the toolbar Oh, it's better not to capture (fork means stop snapping)

How does the Process Monitor monitoring progress Operation registry be implemented?