Difference between revisions of "Advanced Registry Tracer"

Revision as of 02:47, 28 March 2006

Advanced Registry Tracer (ART)from Elcomsoft is a utility designed for analyzing changes made to the Windows Registry. It takes snapshots of the registry and stores them in a database. Snapshots can be compared against one another. A free trial version of the program can be downloaded from the developer.

The setup.exe file is a Nullsoft Scriptable Install System (NSIS) script, so can be run in silent mode with the "/S" option. The installation directory can be specified with the "/D=dir" option as shown below, where the software is being installed to "C:\Program Files\Utility\Art".

<package
  id="ART"
  name="Advanced Registry Tracer"
  revision="1"
  reboot="false"
  priority="1">

  <check type="uninstall" condition="exists" path="Advanced Registry Tracer" />
  <install cmd='\\server\wpkg\pkg\utilities\sysmgmt\advanced_registry_tracer\setup.exe
    /S /D=%PROGRAMFILES%\Utilities\ART'>
    <exit code="0" />
  </install>
  <remove cmd='"%PROGRAMFILES%\Utilities\ART\uninstall.exe" /S' />
</package>

Reference:

Installation of Advanced Registry Tracer (ART) with wpkg