How to compare two dumps?

Question

Windows

I want to track the traces left after installing hooks and so on. The plan is to dump windows before installing the software and after. How can you compare two dumps, maybe there is a plugin for volatility?

Answer 1

RegShot, SysTracer - these utilities can take a snapshot of the file system and registry before and after installing the program - then compare. Also try sandboxie, but there may be problems installing some programs.