Taking Windows Registry snapshots can be a way to analyze changes that have been made to the system during a set period of time. The time being of course the days, hours or minutes between the first and second snapshot.
Regshot is a software that is able to take Windows Registry snapshots and compare two of the snapshots that have been taken. Results can be displayed as a text or html document making it easy to find out what has been changed because only the modifications that have been discovered are listed.
It is possible to add directories as well that will also be checked for modifications. An add-on called UnDoReg makes it even possible to undo all the changes to the registry by simply loading the generated text report.
Read More:
Regshot
UnDoReg
UnDoReg
ليست هناك تعليقات:
إرسال تعليق