Tiny Watcher takes a snapshot of important parts of your Windows system: running processes, files, registry, scheduled tasks.
Afterwards, it tracks changes - every time you log in, or whenever you run it. When a change is detected, you are notified.
A hardware supported hypervisor originally built for malware analysis. Features: Linux VM introspection, minimal detectability, small (~150KB), simple, and well documented. Can be used for other purposes. Support for Intel-VT & Windows coming soon.