CyberShadow

Hi, Thanks for the reply I was wondering if something could be done using Vmware, or a logging program which stealthily sends or records this data. Splunk seemed to do the job but not the opensource version...???

I have been looking for programs that can passively monitor an operating system and list all changes to file structure and registry. The monitoring has to be done passively, (without installing any software on the OS). The idea is to track all changes made to the OS after installing a program in order to detect any payloads attached to an EXE. I was thinking of two options - - either a program which takes a snapshot at a point in time creating an image, then at a later stage another image is taken and these are compared. - a method logging registry and file structure changes to a log file. Does anyone know of programs that are capable of this? thanks CybrShadow