Analyze changes made to the Windows Registry. ART does this by making 'snapshots' of the Registry and saving them in its database, which you can later browse through at your convenience.