Is there any way to view dates of changes to Windows registry keys/values?

Question

Is there any sort of date tracking that is done or viewable in the Windows registry, such as seeing the date when X key was created, or Y key was modified, similar to how file systems track?

I'm trying to find changes that were made to specific areas of the registry during certain date ranges, and it would be fantastic if there was a way to work with date data.

Solution

Registry keys have a last-modified timestamp. You can use Regedit to export a key, selecting the ".txt" output format. That text file will contain the last modified date&time.

NirSoft's RegScanner utility allows one to filter selected registry keys by ranges of the last-modified timestamp.

Comments

[Moab]

You can start using this software to take snapshots of the registry to compare later, may not help you right now but will make it easier in the future>>>>sourceforge.net/projects/regshot

[lyrica]

Wow, super useful. Never knew this was possible. And that tool will be just as useful. Thanks.