BRONZE PARTNER:
BRONZE PARTNER:
Industry News:
| |
|
|
|
| Get information about Registry Activity |
|
|
|
By: Rod Trent
Posted On: 10/17/2008
Use this Windows PowerShell script to read registry activity on a computer.
Copy and paste the script between the lines.
***************************
$computer = "LocalHost"
$namespace = "root\CIMV2"
Get-WmiObject -class Win32_RegistryAction -computername $computer -namespace $namespace
***************************
Information retrieved:
ActionID
Caption
Description
Direction
EntryName
EntryValue
key
Name
Registry
Root
SoftwareElementID
SoftwareElementState
TargetOperatingSystem
Version
|
|
|
|
|
|
