Re: Recently Installed Application Log/history/auditing
Filemon only works when it is running prior to the installation of on application. I suspect that Regmon works the same way.
How ever there might be a way to run one of these programs and save snapshot and then run it on the suspected computer again and do a comparison.