OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Full-Disclosure] Windows Registry Analzyer

From: Todd Towles (toddtowlesbrookshires.com)
Date: Thu Mar 03 2005 - 13:19:35 CST


Use RegMon for real-time Reg watching and try this product for Snapshot
compares. I haven't used it but it looks to be fun and there is a
write-up in PCWorld about it.

---------------------------------------------------
                        Readme file of Regshot 1.61 2002/03/30
                ---------------------------------------------------
                        Please view whatsnew.txt for update info!

-----------------
Package includes:
-----------------
regshot.exe,language.ini,readme.txt,whatsnew.txt

-----------------
Introduction:
-----------------
RegShot is a small registry compare utility that allows you to quickly
take a snapshot
of your registry and then compare it with a second one - done after
doing system changes
or installing a new software product. The changes report can be produced
in text or HTML
format and contains a list of all modifications that have taken place
between snapshot1
and snapshot2.In addition, you can also specify folders (with sub
filders) to be scanned
for changes as well.In version 1.60+ you can save your whole registry in
a *.hiv file for
future use.
Note: Regshot is a FREEWARE!

 http://regshot.yeah.net/

PCWorld Page -
http://www.pcworld.com/downloads/file_description/0,fid,19540,00.asp

-Todd

> -----Original Message-----
> From: full-disclosure-bounceslists.netsys.com
> [mailto:full-disclosure-bounceslists.netsys.com] On Behalf
> Of Frank Knobbe
> Sent: Thursday, March 03, 2005 11:54 AM
> To: Danny
> Cc: Full-Disclosure (E-mail)
> Subject: Re: [Full-Disclosure] Windows Registry Analzyer
>
> On Thu, 2005-03-03 at 10:35 -0500, Danny wrote:
> > Anyone know of any free tools to analyze what changes have
> been made
> > to a Windows 2000/XP registry?
>
> There used to be a company/product called Intact, which
> provided change monitoring of Registry settings as part of
> its HIDS offerings. I'm not sure if they are still around or
> got bought. Unfortunately it's not a free tool though.
>
> Regards,
> Frank
>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html