3

I've been looking for a capturebat alternative that will function on Windows 10 and 64 bit.

I'm not interested in capturbat's network capabilities; rather, I'm interested in its capacity to capture file changes and save a duplicate of all files that were created, edited, or deleted.

I know you can manually copy all files or set permissions on a certain folder to avoid deletion, but isn't there something like to capturebat?

thanks a lot,

Improve this question
5
  • When talking about certain software please always include a link to the software web site. Software recommendation question should better be posted here: softwarerecs.stackexchange.com BTW: it would be more helpful if you would mention what functionality you want and not what you don't want...
    – Robert
    Oct 25, 2022 at 17:39
  • thanks for your comment here is the link to capturebat:honeynet.org/projects/old/capture-bat and I specified in my thread what I need the software to do: "I'm interested in its capacity to capture file changes and save a duplicate of all files that were created, edited, or deleted."
    – dakar111
    Oct 25, 2022 at 22:57
  • The only thing (other than an FSFD) that comes to mind are VSS snapshots. They deliver something that is somewhat akin to what you want. But the way you describe it it sounds as if a file system filter driver is involved. All links on the above site were dead, but someone put it on GitHub. A cursory look shows that this is an FS mini-filter, something that is supported to this day. So if you revive the project and overcome the hard code-signing requirements on modern Windows, you could arguably get it to work.
    – 0xC0000022L ♦
    Oct 26, 2022 at 8:03
  • 1
    I’m voting to close this question because it's not related to reverse-engineering.
    – peter ferrie
    Oct 31, 2022 at 4:47
  • @peterferrie have you ever heard of Dynamic/Behavioral analysis?
    – dakar111
    Nov 1, 2022 at 10:53

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.