
Chapter 5: Using WMI Events 109
MonitorRegistryChangeEvents.v
bs
strEvent = "SELECT * FROM RegistryKeyChangeEvent"
strHive = "HKEY_LOCAL_MACHINE"
strKeyPath = "SOFTWARE\Microsoft\Windows NT\CurrentVersion"
Set objWmiServices
= GetObject("winmgmts:root/default")
Set objWmiSink = Wscript.createObject("WbemScripting.SWbemSink", "SINK_")
objWmiServices.ExecNotificationQueryAsync objWmiSink,
_
funMakeStr(strEvent,strHive,StrKeyPath)
WScript.Echo "Monitoring for Registry Changes ..." & vbCrLf
While(true)
WScript.Sleep
2000
Wend
Sub SINK_OnObjectReady(wmiObject, wmiAsyncContext)
WScript.Echo "Registry
Change occurred" & vbCrLf & _
"---------------------- ...