[Brookit]

Hi,

I am searching for a tool which monitors the Filesystem for any newly created files AND makes instant copies of the files before they get deleted.

Something like DrvMon from EP_X0FF and Fyrre for all new created files and not just .sys files.

[SUPERIOR]

i guess you are talking about systracer ...i remember it has this feature ...you can give it a try

[Brookit]

Thanks for pointing that out, I will give it a try!

[Meriadoc]

A simple cli tool with src here :

https://www.honeynet.org/node/315

tut :

http://travisaltman.com/malware-analysi ... pture-bat/