I want to catch the registry key(s) modified by the system (win xp) when I modify some data about logon (use login screen). Registry monitor doesn't catch any keywrite request. Is it a 'system process' that operates 'under' the level at wich Regmon intercepts callings?
Thanks in advance Agostino
|