Contents of a snapshot
After a snapshot was created or loaded its contents can be viewed in the Contents tab. You cannot modify the snapshot contents as these tabs are provided for informational purposes only.
The following topics provide information about using Contents node of a snapshot:
Files included in a snapshot
The Files node displays a list of all drives included into the snapshot.
Below the node you can see a node per listed drive with the complete listing of all directories and files contained in that drive very much in the same form as the Explorer. You can move down into the directory hierarchy by selecting it in the left window pane. The right window pane displays the following information about all files included in the snapshot:
Parameter | Description |
|---|---|
File Name | This field displays the full name of the file. |
Size | This field shows the size of the respective file in bytes. |
Modified | This field displays the date and time of the last modification of this file in the default format defined in the user preferences. |
The Registry node
The Registry node displays all keys and values included into the snapshot.
Below the node you can see a node per listed key with the complete listing of all subkeys contained in the form of an Explorer. You may move down into the hierarchy by selecting a key it in the left window pane. The right window pane displays the following information about all keys and values included in the snapshot:
Parameter | Description |
|---|---|
Name | This field displays the complete name of the value of the selected key. |
Type | This field displays the type of the value. Possible value types are String, Binary and DWORD . |
Size | This field displays the size of the value in bytes. |
Value | This field shows the data of the value. This may either be an integer, a binary value or a string such as YES , or a directory path for example. |
The Services node of a snapshot
The Services node displays all services found on the system at the time of the snapshot. The view in the right window pane displays in tabular format the following information about the included services:
Parameter | Description |
|---|---|
Name | This column displays the name of the service. |
Path | The Path column displays the full path to the executable file of the service. |
User | The User column displays the account which started the service, normally LocalSystem . |
The snapshot Drivers node
The Drivers node displays all drivers found on the system at the time of the snapshot. The following list box displays in tabular format the following information about the included drivers:
Parameter | Description |
|---|---|
Name | This column displays the name of the driver. |
Path | The Path column displays the full path to the executable file of the driver. |
User | The User column displays the account which started the driver. |