What you can do is to use it to export all the important keys you want to monitor to a text file when the system runs in good condition and export them again after a system change or software installation. The command Reg is the built-in command line from Windows for registry but you can’t use it directly for monitoring or tracking purpose. The baseline snapshot is automatically saved in the same directory as the executable utility so you can close the utility and run it at anytime later on. There are 2 steps for using the utility, first to take a snapshot as the baseline state and then take another one for comparing. Similar to Regshot, WhatChanged also scans for modified files and registry entries. Regshot works on both 32-bit and 64-bit Windows and snapshots not only the registry but the Windows directories as well. Once the 2nd shot done, the Compare button will become available for comparison. The 1st shot result can be loaded later on at any time you run the utility again.

Take the 1st shot when you know your computer is in good shape and save the result for 2nd shot to compare. Regshot is an open-source registry comparing utility that allows you to quickly take a snapshot of your registry and the compare it with a second one after a system change or software installation. Until Microsoft puts a nice tool that does the registry tracking or monitoring for us, here are a few ways we can do at the moment. There are just so many occasions where being able to monitoring what’s been changed to the registry could make my life a lot easier. The lack of the tracking and monitoring capability to the registry repository has been one of my frustrations when it comes to computer troubleshooting. Despite the fact that the Windows registry system is one of the most important components in the operating system, Windows doesn’t offer an appropriate useful tool to us to manage it efficiently.

Sysinternals registry monitor