Is there an easy way to "diff" or compare two snapshots (or a snapshot and the current virtual machine) to see which files are different between them?
I can see many uses for this capability, but the one I am thinking about is if a suspicious or infected application is run or a malicious file is opened, to determine whether it hid files in unexpected locations.