Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm searching for a programm that is Win7(32 and 64bit) compatible and includes as much usefull features for application forensic as possible, including:

  • File System changes
  • Registry changes

Programs like TrackWinstall or SpyMe Tools are achiving such goals.

  • Other system related changes and events (error messages etc)

DbgView is usefull to watch if the programm had any messages.

  • Dependency Analysis

Dependencywalker does a great job at this

  • Binary information

Debuggers like Ollydebug can be very usefull

  • Memory usage

It would also be interesting but not mandatory to see the memory the programm uses and be able to view it.

Probably there is no such programm but it's worth a try. Thanks :)

share|improve this question

2 Answers 2

up vote 3 down vote accepted

I would recommend Process monitor for the file system changes, registry changes, etc, and HeapMemView for viewing the program's memory.

share|improve this answer

The Sysinternals applications can do a lot of those: http://technet.microsoft.com/sysinternals

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.