Search code examples
c++filesystemsregistryvirtualizationhook

Registry and file system change identification

Is there a Coding way in C++ to find out the changes happened in Registry and file system. I need to find the changes happened to file system and registry after a software installion.

There is filesystemwatcher in c# to identify filesystem changes. However, I need that to implement in C++ for both registry and files.

Solution

  • For monitoring registry keys you can use RegNotifyChangeKeyValue(), see here. For files you'd use ReadDirectoryChangesW(), see here.