I would like to use either Hyper-V or Vmware in order to find out after taking a Clean Base snapshot and a modified snapshot and what the modifications/differences and what was changed between the two images.
VMware ThinApp is the closest thing I can find to this as it show was was modified between the 2 images as it is trying to create a Virtualized Application. I am not interested in making an virtualized application I am more interested in how a few of our custom made old applications work and where they install to.
This could also be used for security purposes to see what changes were made to the system by a virus or malware.
Anyone have any ideas on how to measure or figure this out?