Notifications
Clear all
Topic starter
04/08/2010 12:06 pm
Is there a CLI tool that can determine what program is accessing or modifying a known bad registry key on a remote machine? I know procmon can do this on a local box, but I need something that isn't GUI based so it isn't intrusive to a remote user…
04/08/2010 4:27 pm
Handle.exe
Topic starter
05/08/2010 5:44 am
How can I get handle to give me the process name?
handle -a | findstr BADKEY
Will only tell me that the key is being accessed, not by which program. Handle also doesn't monitor, which would be nice.