Windows 11/10 没有内置的注册表^(Registry)监控工具。但是您可以做的是，利用Windows命令行程序File Compare或 fc.exe来比较两个注册表导出文件，从而监控Windows 注册表^{(Windows Registry)}更改。您还可以使用一些免费软件来监控Windows 11/10/8/7系统上的注册表更改。^(Registry)

如何监视和跟踪Windows中的^(Windows)注册表^(Registry)更改

您可以使用命令行File Compare fc.exe 工具或WhatChanged、RegShot、Sysinternals Process Monitor等免费软件来监控对注册表的更改。让我们来看看可用的选项。

1]文件比较fc.exe

要使用此文件比较^{(File Compare)}或 fc.exe 程序，首先，导出一个 .reg 文件，并将其命名为rega。

更改发生后，导出更改的.reg文件并将其命名为regb。

现在，打开命令提示符并键入：

fc /u rega.reg regb.reg > regcompare.txt

由于 .reg 文件使用 Unicode，因此/u开关告诉 fc.exe 使用Unicode。

您现在可以在记事本中检查输出regcompare。

2] 发生了什么变化

您还可以尝试使用此第 3 方实用程序WhatChanged 轻松^{(WhatChanged)}监控 Windows 10/8/7 注册表中的更改。

只需下载此便携式应用程序WhatChanged并在更改前后运行它。

3] Sysinternals 进程监视器

Sysinternals Process Monitor是一个很棒的免费软件，可以实时监控注册表的变化。Process Monitor是用于Windows的高级监控工具，可显示实时文件系统、注册表^(Registry)和进程/线程活动。它结合了两个传统Sysinternals实用程序Filemon和Regmon的功能，并添加了广泛的增强列表，包括丰富的无损过滤、会话 ID^{(Session IDs)}和用户名等综合事件属性、可靠的进程信息、带有集成符号的完整线程堆栈支持每个操作，同时记录到文件等等。

4]注册射击

RegShot是另一个小型注册表比较实用程序，可让您快速拍摄注册表快照，然后将其与第二个注册表进行比较；在进行系统更改或安装新软件产品后完成。更改报告可以文本或HTML格式生成，并包含快照 1 和快照 2 之间发生的所有修改的列表。在这里^(here)得到它。

5] MJ注册表观察者

MJ Registry Watcher是一个简单的注册表、文件和目录钩子，用于保护通常受到恶意软件攻击的重要启动文件、注册表项和值。它的资源使用率非常低，默认情况下设置为每 30 秒轮询一次，尽管您可以将其调整为 0 到 9999 之间的任意值。在此处^{(it here)}下载。

还有其他工具可以帮助您监控 Windows 注册表中的更改；他们是：^{(There are other tools that can help you monitor the changes in the Windows Registry; they are:)}

1. 注册表实时观看^{(Registry Live Watch)}
2. LeeLu Monitors AIO系统监视器
3. FRS系统观察^{(FRSSystemWatch)}
4. RegFromApp
5. 注册商注册管理器精简版^{(Registrar Registry Manager Lite)}。

这些也可能让您感兴趣：^{(These may also interest you:)}

1. 揭开 Windows 注册表的神秘面纱。^{(De-Mystifying Windows Registry.)}
2. 如何备份、恢复、维护 Windows 注册表。^{(How To Back Up, Restore, Maintain Windows Registry.)}
3. 如何限制对注册表编辑器等的访问
4. 如何打开注册表的多个实例。

How to monitor and track Registry changes in Windows 11/10

Windows 11/10 does not hаve an inbuіlt Registry monitoring toоl. But whаt you can do is, harness the Windows command-line program File Compare or fc.exe to compare two registry export files, and thus monitor Windows Registry changes. You can also use some freeware to monitor changes to the Registry on your Windows 11/10/8/7 system.

How to monitor and track Registry changes in Windows

You can monitor changes to Registry by using the command-line File Compare fc.exe tool or freeware like WhatChanged, RegShot, Sysinternals Process Monitor, etc. Let us take a look at the options available.

1] File Compare fc.exe

To use this File Compare or fc.exe program, first, export a .reg file, & name it as say rega.

After the change takes place, export the changed .reg file & name it as say, regb.

Now, open a command prompt and type:

fc /u rega.reg regb.reg > regcompare.txt

Since .reg files use Unicode, the /u switch, tells fc.exe to use Unicode.

You can now inspect the output regcompare in Notepad.

2] WhatChanged

You can also try this 3rd party utility WhatChanged to monitor the changes in your Windows 10/8/7 registry, easily.

Simply download this portable app WhatChanged and run it before and after the change.

3] Sysinternals Process Monitor

Sysinternals Process Monitor is a great freeware, to monitor registry changes in real-time. Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such as Session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more.

4] RegShot

RegShot is another small registry compare utility that allows you to quickly take a snapshot of your Registry and then compares it with a second one; done after doing system changes or installing a new software product. The changes report can be produced in text or HTML format and contains a list of all modifications that have taken place between snapshot1 and snapshot2. Get it here.

5] MJ Registry Watcher

MJ Registry Watcher is a simple registry, file, and directory hooker, that safeguards the important startup files, registry keys and values that are commonly attacked by malware. It has very low resource usage, and is set to poll every 30 seconds by default, although you can adjust this to anywhere between 0 and 9999. Download it here.

There are other tools that can help you monitor the changes in the Windows Registry; they are:

1. Registry Live Watch
2. LeeLu Monitors AIO System Monitor
3. FRSSystemWatch
4. RegFromApp
5. Registrar Registry Manager Lite.

These may also interest you:

1. De-Mystifying Windows Registry.
2. How To Back Up, Restore, Maintain Windows Registry.
3. How To Restrict Access to Registry Editor, etc.
4. How to open multiple instances of the Registry.

Related posts

• 如何在Windows 11/10中使用Command Prompt恢复Registry

• 如何在Windows 10中禁用Picture Password Sign-In option

• 如何使用Registry Editor配置Windows 10 Sync Settings

• 禁用Windows 11/10中的Windows key or WinKey

• Registry Editor在Windows 10不打开，崩溃或停止工作

• 如何使用Regdiff进行比较或Merge Registry文件上的Windows 10

• Microsoft Intune不同步？ Force Intune在Windows 11/10中同步

• 如何在Windows 10备份，Move，Move，或Delete PageFile.sys关闭

• 如何解决在Windows 10腐败Registry

• 如何将REGEDIT重置为默认为Windows 10

• 如何在Windows 10计算机中更改默认Webcam

• 如何使用Windows 10交换硬盘驱动器，Hot Swap

• Microsoft Edge Browser Tips and Tricks用于Windows 10

• Fix Crypt32.dll未找到或缺少Windows 11/10错误

• RegCool是一个先进的Registry Editor software，用于Windows 10

• 如何在Windows 10 Control Panel中打开System Properties

• Taskbar通知未显示在Windows 10中

• Windows 10中的Startup Paths，Folders and Registry Settings列表

• 如何在File Explorer中展示Details pane在Windows 10

• 什么是PLS file？如何在Windows 11/10中创建PLS file？