Option To Freeze The System, An Alternative Of Sandbox

If you are not interested to implement Sandbox for applications/files etc, then provide an option to freeze the system by taking snapshot of the whole system before running any suspicious file/application and therefore the changes can be reverted to original state after the system is restarted. And there also provide an option to take the snapshot after running theat suspicious content so that the user can compare the two snapshots for better understanding about the suspicious behavior of that content.