Hybrid technique to protect a registry

A system comprising:

• a processor;
• and memory configured to store one or more sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of:
• instructing a registry writer via a copy service on the host to prepare for generation of a snapshot, the registry writer being responsible for saving system hive files to disk before the snapshot is generated;
• receiving, from the registry writer, a reporting of the system hive files;
• communicating with an application programming interface (API) exposed by an operating system of the host to identify user hive files;
• and
• backing up, from the snapshot to a secondary storage, the system hive files reported by the registry writer and the user hive files identified using the API exposed by the operating system.

A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein, the computer-readable program code adapted to be executed by one or more processors to implement a method comprising:

• instructing a registry writer via a copy service on the host to prepare for generation of a snapshot, the registry writer being responsible for saving system hive files to disk before the snapshot is generated;
• receiving, from the registry writer, a reporting of the system hive files;
• communicating with an application programming interface (API) exposed by an operating system of the host to identify user hive files;
• and
• backing up, from the snapshot to a secondary storage, the system hive files reported by the registry writer and the user hive files identified using the API exposed by the operating system.