Eight Years of Service
Posts: 6
Threads: 1
[Question] Tracking changes in system M$ Windows. 05-22-2018, 02:42 AM
#1
Anyone know live windows system changes tracker - registry and files change? All in one program like a "SpyTheSpy" but newer?
System State Analyzer doesn't give results in "live". BSA is only for Sandboxie.
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
•
Eight Years of Service
Posts: 210
Threads: 13
RE: [Question] Tracking changes in system M$ Windows. 05-22-2018, 07:27 AM
#2
Like... Sysinternals' Process Monitor? or Regmon?
•
Thirteen Years of Service
Posts: 74,304
Threads: 317
RE: [Question] Tracking changes in system M$ Windows. 05-22-2018, 10:10 AM
#3
In terms of logs pertaining to system access, security changes, executing applications etc, checkout the native Windows tool being "Event Viewer".
•
Eight Years of Service
Posts: 6
Threads: 1
RE: [Question] Tracking changes in system M$ Windows. 05-27-2018, 04:06 AM
#4
Event Log Viewer doesn't give look to API hooks / calls. I trying search tool like a BSA. I used SysInternal tools.but i need something more advanced.
•
Eight Years of Service
Posts: 1,890
Threads: 73
RE: [Question] Tracking changes in system M$ Windows. 05-27-2018, 04:09 AM
#5
So, something like Watch 4 Folder?
•
![[Image: AD83g1A.png]](http://i.imgur.com/AD83g1A.png)
