|
Previous Top Next |
| TO SCAN:
|
|
|
| art /s [<RGF-file>.rgf] {-o|-a}[-b][-m:\\<remote machine>][-l:<logfile>][-f:<filter>]
|
|
|
| s – Is the Registry scan command switch.
|
| <RGF-file> - is the ART database file, where the registry snapshot is to be saved. It must have the .RGF extension. This may be either a new file or a file that already contains some scans. If this file is not defined one should take a file from Edit | Settings | General | ART database file.
|
|
|
| <Switches>
|
| -o If the file (.RGF) exists, overwrite it
|
| -à If the file (.RGF) exists, add the scan results to the end of file.
|
| -b If the file exists, create its backup (*.bak).
|
| -m Scan the registry of a remote machine named "remote machine".
|
| -l If any errors occur while executing the command, they are to be saved in the file named "logfile".
|
| -f Use the filter <filter> (filter's name).
|
|
|
| TO COMPARE:
|
|
|
| Files of .REG format UNDO or REDO or both are the result of a comparison made in command line mode. At least one of them should be defined. In command line mode one cannot explicitly name the sources (snapshots) for comparison. The selection of both sources is performed automatically using the following algorithm:
|
|
|
| 1.If, in the last session, two snapshots were opened they will be used.
|
| 2.If only one snapshot was opened the next and the last snapshot will be used.
|
| 3.If the last snapshot is opened then it and the one before it will be used.
|
|
|
| art /c [<RGF-file>.rgf] [-f:<filter>][-fu:<undo-file>.reg][-fr:<redo-file>.reg][-l:<logfile>]
|
|
|
| c – The comparison command switch.
|
| <RGF-file> - is an ART database file. It must have the .RGF extension. If this file is not defined one should take a file from Edit | Settings | General | ART database file.
|
|
|
| <Switches>
|
| -fu <undo-file>.reg
|
| -fr <redo-file>.reg
|
| -f Use the filter <filter> (filter's name).
|
| -l If any errors occur while executing the command, they are saved in the file named "logfile".
|
|
|
| Example:
|
| art/c -fu: wert1.reg -f:New_filter2 -fr:fret2.reg - l:log33.txt
|
|
|
| A comparison of the two snapshots that are selected is made using the algorithm mentioned above. In a comparison the filter New_filter2 is used (it is taken from the Filters directory) and the result is formed as two undo files: wert1.reg" and redo: "fret2.reg" (naturally one can use only one file).
|