02 November 2017

viewing registry keys used by an application

You can easily view registry keys used by an application via tool called Process Monitor from Microsoft Sysinternals.

Launch the Process Monitor. Click on the Filter menu item in the toolbar.







Set the filter to match below. Where PID is application Process ID for which you want to see the registry keys.

















Then Process Monitor will start showing the registry keys accessed by the application, as and when such event happens.

No comments:

Post a Comment