| CPC G06F 21/6281 (2013.01) [G06F 12/1416 (2013.01); G06F 12/1466 (2013.01); G06F 21/604 (2013.01); G06F 2221/2101 (2013.01); G06F 2221/2141 (2013.01); G06F 2221/2149 (2013.01)] | 20 Claims |

|
1. A method, comprising:
identifying, via one of one or more computing devices, a registry operation requested by a user process;
performing, via one of the one or more computing devices, an evaluation of the registry operation based on at least one registry access rule;
generating, via one of the one or more computing devices, a custom message to interact with the user process, the interaction comprising receiving an input from the user process; and
determining, via one of the one or more computing devices, an action based on the evaluation, wherein the action comprises at least one of:
blocking the registry operation in relation to a particular key in a registry of an operating system, and
enabling access to a particular key in the registry of the operating system to perform the registry operation requested by the user process.
|