Notifications
Clear all

InControl5

17 Posts
7 Users
0 Reactions
2,292 Views
(@gtorgersen)
Trusted Member
Joined: 17 years ago
Posts: 70
Topic starter  

I am looking for the product InControl5. I cannot find it. It seems fairly old but it seems like a very useful tool for research Does anyone know where I can find this tool or one that is similar in functionality?


   
Quote
(@bithead)
Noble Member
Joined: 20 years ago
Posts: 1206
 

From the source PCMag


   
ReplyQuote
(@gtorgersen)
Trusted Member
Joined: 17 years ago
Posts: 70
Topic starter  

Very nice. Thanks very much. D


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

Yes, it is very useful, but it also "misses stuff". There are a number of freeware tools for both active monitoring and post installation/execution diffs that can give you better results.


   
ReplyQuote
(@gtorgersen)
Trusted Member
Joined: 17 years ago
Posts: 70
Topic starter  

Thanks for the response. Can you give me some names of some of those tools. Not just for installation diffs but just maybe snapshot diffs. I can use tools like procmon.exe but want to know what else there may be. I hate to write a program to do it if there is already something out there that will suffice.

Thanks again for all you guys help.


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

"Can you give me some names of some of those tools."

You're kidding, right? You're not about to do anything for yourself? Seriously?


   
ReplyQuote
(@gtorgersen)
Trusted Member
Joined: 17 years ago
Posts: 70
Topic starter  

What is with this response? I find it very rude. I didn't know sharing knowledge on a forum is bad form and I don't appreciate you insinuating that I don't do anything for myself.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

I guess that keydet89 was referring to using a bit more search engines, like Google.

However, here
http//www.msfn.org/board/index.php?showtopic=114616
http//sourceforge.net/projects/regshot/
http//www.paraglidernc.com/plugins/regshot.htm
http//www.boot-land.net/forums/index.php?showtopic=5860
http//www.nirsoft.net/utils/reg_file_from_application.html

are some links/apps
which I gather cover also your other request here ?
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=3625

jaclaz


   
ReplyQuote
(@gtorgersen)
Trusted Member
Joined: 17 years ago
Posts: 70
Topic starter  

Thank you for your response.

I have used Google and have the tools you reference below. I have not been able to find a tool that does what I am looking for, comparing an entire file system at two points in time. I will develop one myself but wanted to ask to see if anyone knew of a tool.

I apologize for coming off short.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

I have not been able to find a tool that does what I am looking for, comparing an entire file system at two points in time.

Yep, but I still haven't understood which kind of compare/practical use is it.

I mean, you can make a RAW HEX compare of Physical data, compare the output of a DIR /S command or create the (MD5) hashes of all files on it and compare them.

Another way would be to create two images (in different times) then mount them both and compare them with a tool like this
http//www.xs4all.nl/~lploeger/TreeComp3.htm

And yet another way would be to use an app like strarc
http//www.ltr-data.se/opencode.html
http//www.ltr-data.se/files/strarc.txt
to create a full and a differential backup (there are several apps of this kind available) then check just what is within the differential backup….

jaclaz


   
ReplyQuote
Page 1 / 2
Share: