Show all registry/filesystem changes

[Guest]

I really like new Resource Access Monitor. This enables me exactly see which resources are requested by application.
What I would really find helpful is a way of seeing all registry changes(including values) an application (installer?) did to a system. This would be a great way of making sure the installer is not doing anything bad to a system...
A view could be in .reg format, so that we can copy/paste into a new .reg file if needed...

Otherwise, sanboxie is perfect and getting better with each new release. Keep up the good work!

[SnDPhoenix]

tzuk has mentioned before, he hates the idea of incorporating a registry monitor into the program, so it probably isn't going to happen anytime soon....
However, there are alternatives you can use. For example, you can take WRR open up your reghive file, then just export the reghive to a reg format4 file.

You should be able to then see which keys were created. Hell, you dont even have to export the reghive, just look at the entries with WRR, or dont even use WRR and instead just open Regedit unsandboxed and from there read all the keys that have been created in the sandboxed registry.

[tzuk]

SnD, I am going to have to keep my promise at some point and delete this topic.

[SnDPhoenix]

Haha, thats ok.

[Guest]

Sorry, I didn't see the common features and your reply to this feature. I respect your judgement, although I (and as it made the common request) a lot of others would really like to see this feature as nice addition to Resource Access Monitor. As you pointed out this is not a democracy , but I know you care about the users feedback.

Don't you agree that it would improve security if we were able to easily and right away see the registry changes rather than using third-party products?

[Brummel]

use a registry dumper instead moaning.
why to track when its killed at least?

[tzuk]

Sorry, I didn't see the common features and your reply to this feature. I respect your judgement, although I (and as it made the common request) a lot of others would really like to see this feature as nice addition to Resource Access Monitor

I've had this discussion too many times already so I will be brief.

Resource Access Monitor is not a trace tool.
Tracing is not part of the vision that I have for Sandboxie.
I will not add this feature
There is nothing to discuss, debate or argue.

[Kind]

What I would really find helpful is a way of seeing all registry changes(including values) an application (installer?) did to a system. This would be a great way of making sure the installer is not doing anything bad to a system...
A view could be in .reg format, so that we can copy/paste into a new .reg file if needed...

For that you can use SandboxDiff.exe - see this topic. It does just what you want.

You can see the changes in .reg format also.