Posted: 2/4/2008 11:12:27 AM EDT
|
I'm in need of a program which can establish a baseline on a Windows XP workstation and, from that baseline, determine what files, registry keys, settings, etc. have been added, deleted, modified, etc. I remember a while back using a utility much like this called Tripwire on a Unix platform, but I'm looking for something that's (1) free (legally), and (2) runs on a Windows OS. Thanks! _MaH |
|
If there is a free program that can do it, the guys who wrote sysinternals (who are now senior fellows at Microsoft) would have written it: technet.microsoft.com/en-us/sysinternals/default.aspx They've written quite a few programs to do lots of deep level stuff that impressed Microsoft. edit: # Process Monitor Monitor file system, Registry, process, thread and DLL activity in real-time. on http://technet.microsoft.com/en-us/sysinternals/bb545046.aspx |
That is EXACTLY what I need!!!! Thanks a lot, David!!  _MaH |
Mark really knows his shit when it comes to the inside of MS operating systems. He's also pretty responsive to questions if you need help with the code he has written. |