Good news everyone – I just received email from Roger (a.k.a. Kephyr) – he is author of brilliant SystemSherlock. He allowed me to include SystemSherlock in one package with my GUI – so now you can download one package with both GUI and command line interface
To remind you, SystemSherlock is snapshoting utility (like Regshot), that can track changes on your filesystem or registry…
Snapshoting is sometimes (often) better than using ProcMon\RegMon\FileMon – you only see real changes, no reads etc… So I prefer snapshoting when I for example want to find where in registry are some changes hapenning.
Compared to RegShot, SystemSherlock is I think much better – you can compare unlimited dumps (not only 1st & 2nd snapshot) and I like GUI more 😉
Download and enjoy
P.S.: If you have any feature requests or bugs to report, feel free to contact me, I would like to keep SystemSherlock alive