Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm searching for a programm that is Win7(32 and 64bit) compatible and includes as much usefull features for application forensic as possible, including:

  • File System changes
  • Registry changes

Programs like TrackWinstall or SpyMe Tools are achiving such goals.

  • Other system related changes and events (error messages etc)

DbgView is usefull to watch if the programm had any messages.

  • Dependency Analysis

Dependencywalker does a great job at this

  • Binary information

Debuggers like Ollydebug can be very usefull

  • Memory usage

It would also be interesting but not mandatory to see the memory the programm uses and be able to view it.

Probably there is no such programm but it's worth a try. Thanks :)

share|improve this question
up vote 3 down vote accepted

I would recommend Process monitor for the file system changes, registry changes, etc, and HeapMemView for viewing the program's memory.

share|improve this answer

The Sysinternals applications can do a lot of those: http://technet.microsoft.com/sysinternals

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .