OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] Windows Registry Analzyer

From: Dave King (davefddavewking.com)
Date: Thu Mar 03 2005 - 11:02:59 CST


Another possibility for static analysis would be to use Regedit to
export the registry to a text file before and after and then use WinDiff
or ExamDiff or some other file comparison utility to find the changes
for you.

Laters,
Dave King
http://www.thesecure.net

Cassidy Macfarlane wrote:

>You can, of course, use regmon (sysinternals.com) to monitor the
>registry 'live' while changes are being made, however it sounds like you
>want a product that would analyse the reg, then re-analyse after
>installation, and report on changes.
>
>This would indeed be a handy tool. Anyone know of anything better than
>regmon for this purpose?
>
>-----Original Message-----
>From: full-disclosure-bounceslists.netsys.com
>[mailto:full-disclosure-bounceslists.netsys.com] On Behalf Of Danny
>Sent: 03 March 2005 15:36
>To: Full-Disclosure (E-mail)
>Subject: [Full-Disclosure] Windows Registry Analzyer
>
>
>Anyone know of any free tools to analyze what changes have been made
>to a Windows 2000/XP registry?
>
>Thanks,
>
>...D
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>
>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html