To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Logging the use of remote registry

mrfusion W/ Alumni Posts: 7 Security Scout



i have a "strange" request.. i need to log (and eventually block)  the use of the remote registry on the client


i "trapped" the use of the rdp with a firewall rule, and i'm trying to do the same thing with the regedit (and the remote registry)


thanks for help, and forgive my bad english!




  • Peter
    Peter W/ Alumni Posts: 127 Threat Terminator


    The registry can be audited just as the filesystem. Maybe a solution to the problem at hand?

    Check this link.

  • Janiashvili
    Janiashvili W/ Alumni Posts: 15 Digital Defender

    I guess you should try Computer Management, block certain actions and use event viewer...

This discussion has been closed.