How to list Registry changes by time

Martin Brinkmann
Feb 24, 2016
Tutorials
|
4

The default Windows Registry editor, much like many other default programs that ship with the operating system, is functional but severely lacking when it comes to features that it provides.

Search for instance is bare bones and does not provide you with an overview of all hits found, and there is no way to enter a key path directly to jump straight to it.

Third-party Registry editors add these features, and more. One interesting feature provided by Registry Finder, a free portable software for all versions of the Windows operating system, is that you can use it to list all Registry changes by time.

Listing Registry Changes by Time

Maybe you are wondering why you'd ever need that functionality. While most Windows users may have no need for it, and this is likely the reason why Microsoft did not add the feature to its Registry editor, it can be useful when you are troubleshooting issues, or want to know if specific keys have been modified in a time period.

Or, you are curious and want all changed Registry keys of the given day displayed to you.

Naturally, you may combine the date filter with others, for instance a string value or restrict the output to a certain key path.

Using Registry Finder for the purpose

Download, unpack and run Registry Finder on your Windows machine. It is provided as a 32-bit and 64-bit version, so make sure you download the right one for your system.

Open Registry Finder afterwards and select Edit > Find from the main menu at the top. Doing so opens the following "Find" menu that you use to find Registry keys.

The "modified in period" filter allows you to set a starting and end date for your search. You can leave the search term empty to display all Registry keys modified in the time period, or restrict results to the search string and other parameters such as a root key that you want searched.

As far as the date is concerned, you can set either a starting or end date, or both. Please note that results are limited to 10,000 by default, and that you will receive a prompt if the search hit the limit.

If that is the case, try limiting results to a specific key instead or narrowing down the search term.

The search results list a "date modified" value which shows when a key was modified the last time. A click on the header sorts the data based on it.

Registry Finder highlights the value, type and data of the key in its interface but does not reveal what has been changed actually as it is not a Registry monitor which records all changes made to the Registry.

Tip: If you want to monitor the Registry, try applications such as RegFromApp, What Changed, or Registry Alert.

Closing Words

Registry Finder is an excellent program that offers several advantages over the default Registry editor of the Windows operating system. While you may find the date-based filter useful, other program features such as tabbed browsing, better search results, or entering a path directly to jump to it may even be more useful than that.

Now You: Do you use a third-party Registry editor? (via I Love Free Software)

Summary
Article Name
How to list Registry changes by time
Description
Find out how to use the free third-party Registry editor Registry Finder to display all keys changed during a time period.
Author
Publisher
Ghacks Technology News
Logo
Advertisement

Previous Post: «
Next Post: «

Comments

  1. Little Boy said on June 3, 2016 at 8:31 am
    Reply

    Abandon all hope…..use Registrar registry editor home version….best…..fastest….freeware….most feature packed……portable….no adware…..no spware……terms of service/privacy policy–>OK….Virus total–>OK No links given–>no affliates………available from majorgeeks and softpedia…Enjoy Responsibly

  2. Ishan @ILoveFreeSoftware said on February 25, 2016 at 6:20 am
    Reply

    Thanks for linking to the article :)

  3. Dave said on February 24, 2016 at 11:08 am
    Reply

    I started using that one that you suggested last month, where you can go straight to keys by pasting the full key address. Registry Finder I think it’s called.

    Oh wait, that’s this one again :D

    1. Martin Brinkmann said on February 24, 2016 at 11:49 am
      Reply

      Haha, yes Dave that is the same one ;)

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.