1. A computer-implemented method of using a Software Reconciliation Framework (SRF) tool, the method comprising: receiving change data describing changes to one or more files stored on a computer-readable storage device; determining installed software on a computer associated with the computer-readable storage device; receiving a manifest comprising a description of file changes associated with a software patch or update for the installed software; comparing the change data to the manifest; and if the change data matches the manifest, promoting the changes, thereby producing promoted changes, and if the change data does not match the manifest, marking the changes for further analysis, thereby producing marked changes.