I am looking for the product InControl5. I cannot find it. It seems fairly old but it seems like a very useful tool for research Does anyone know where I can find this tool or one that is similar in functionality?
From the source
Very nice. Thanks very much. D
Yes, it is very useful, but it also "misses stuff". There are a number of freeware tools for both active monitoring and post installation/execution diffs that can give you better results.
Thanks for the response. Can you give me some names of some of those tools. Not just for installation diffs but just maybe snapshot diffs. I can use tools like procmon.exe but want to know what else there may be. I hate to write a program to do it if there is already something out there that will suffice.
Thanks again for all you guys help.
"Can you give me some names of some of those tools."
You're kidding, right? You're not about to do anything for yourself? Seriously?
What is with this response? I find it very rude. I didn't know sharing knowledge on a forum is bad form and I don't appreciate you insinuating that I don't do anything for myself.
I guess that keydet89 was referring to using a bit more search engines, like Google.
However, here
http//
http//
http//
http//
http//
are some links/apps
which I gather cover also your other request here ?
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=3625
jaclaz
Thank you for your response.
I have used Google and have the tools you reference below. I have not been able to find a tool that does what I am looking for, comparing an entire file system at two points in time. I will develop one myself but wanted to ask to see if anyone knew of a tool.
I apologize for coming off short.
I have not been able to find a tool that does what I am looking for, comparing an entire file system at two points in time.
Yep, but I still haven't understood which kind of compare/practical use is it.
I mean, you can make a RAW HEX compare of Physical data, compare the output of a DIR /S command or create the (MD5) hashes of all files on it and compare them.
Another way would be to create two images (in different times) then mount them both and compare them with a tool like this
http//
And yet another way would be to use an app like strarc
http//
http//
to create a full and a differential backup (there are several apps of this kind available) then check just what is within the differential backup….
jaclaz