Abstract: This paper describes the process of identifying the state of a computer system based on tracking changes in the file system under the condition that there is no reliable information about ...