QuestionQ104

VerifiedLog Management

Which of the following Windows events is logged each time a user attempts to access the “Registry” key?

Explanation

Windows Security Event ID 4656 records a request for a handle to an object, including a registry key, and therefore captures an attempted registry-key access. Event 4663 records that an access right was actually used, while 4657 is specific to registry-value modifications.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!