-
@bartblaze Procmon through Noriben. RegShot misses too many critical operations (e.g. key created then deleted, modified then reverted).
@bbaskin Exactly! Also, I don't like the default TXT/HTML layout output. But that's probably just me.
-
-
@bartblaze Only problem with Procmon is that when it shows data written to the registry, it'll only show the first X bytes then a "..." -
@bbaskin Using Procmon now + ProcDOT, not bad. :)
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.