pimp wrote:
If someone changes the security for a registry key (for example deny for a user), is possible to track this change and know who did it? Is there any clue in the registry?
In the Registry? No. However, it's possible to determine this through the creation and analysis of a timeline that includes, but is not limited to, Registry data.
↧