Data Sentinel produces a baseline database of information pertaining to files and registry entries, and then at later dates compares current system properties to this database.

Data Sentinel examines a large number of properties and attributes of each file to ascertain whether or not any changes have been made. Rather than simply check the last modification time, which can be easily changed, Data Sentinel performs a complex cryptographic hashing algorithm on the actual data contained within each file. In this manner, if files are altered in any way, Data Sentinel will detect this.

Data Sentinel comes with comprehensive reporting tools that will enable you to quickly ascertain which files or registry entries have been modified, and allow you to compile 'data forensic' evidence.