A simple dotnet cli tool for taking snapshots of the Windows registry for comparison against a baseline.
- Requires .NET 6.0 Runtime
Using terminal:
dotnet tool install delta-cli
- Builds a heirarchical model of the registry, for use with comparison tools
- Automatically checks for differences when providing
-t snapshot
during a scan.
delta-cli -t <scantype> (baseline, snapshot)
- Initially, start with a baseline scan to capture the current state of the registry.
- After you suspect changes to the registry, run with scan type snapshot to capture changes and generate a diff report.
Notes
- By default, all scans are stored at
%AppData%\\.delta-cli