I had a question about using a api.
I trying 2 write a IDS and I trying 2 make it monitor system files and the registry
the only API that I found in the win32 reference was

ReadEventlog-
RegGetKeySecurity-
NotifychangeEvntLog-

and was wandering are these the proper api functions to do such a job:alright:
Posted on 2003-02-12 12:53:39 by Tweak
Look into:
RegNotifyChangeKeyValue

The SHChange* apis are only available on W2K and above and will do what you want and more... Will let you know just about anything that happens with the OS.
SHChangeNotifyRegister
SHChangeNotifyDeregister
SHChangeNotification_Lock
SHChangeNotification_Unlock

I think there was 1 or 2 more and or an callback API that worked on win9.x but can't remember now...
Posted on 2003-02-12 13:19:51 by Gunner
thx, :alright:

I give it a spin, figure there was something to watch this .
Posted on 2003-02-12 13:40:14 by Tweak