To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Logging the use of remote registry

mrfusion
mrfusion W/ Alumni Posts: 7 Security Scout

Hi,

 

i have a "strange" request.. i need to log (and eventually block)  the use of the remote registry on the client

 

i "trapped" the use of the rdp with a firewall rule, and i'm trying to do the same thing with the regedit (and the remote registry)

 

thanks for help, and forgive my bad english!

 

Sergio

Comments

  • Peter
    Peter W/ Alumni Posts: 127 Threat Terminator

     

    The registry can be audited just as the filesystem. Maybe a solution to the problem at hand?


    Check this link.

  • Janiashvili
    Janiashvili W/ Alumni Posts: 15 Digital Defender

    I guess you should try Computer Management, block certain actions and use event viewer...

This discussion has been closed.