I need to monitor a specific registry key in HKCU for changes. Most importantly I need to know when it changed, who changed it (the process) and what it changed too.
I know this can be done via Proc Mon, however the complications of the situation means I can't go installing new external software onto a machine I need to monitor. Also the command line use of this program isn't suitable for my needs.
I can however implement a VBS or small c# / VB application, so long as it runs silently.
Is there a simple way to monitoring a key and if it changes record the change? Again, most important thing here is which process changed it.
Any thoughts on how this can be done appreciated.