Process Monitor
Template:Short description Script error: No such module "redirect hatnote".
Page Module:Infobox/styles.css has no content.
| Script error: No such module "If empty". | |
|---|---|
| Lua error in package.lua at line 80: module 'Module:InfoboxImage/data' not found. Script error: No such module "If empty". | |
| Lua error in package.lua at line 80: module 'Module:InfoboxImage/data' not found. Screenshot of Windows 10 Process Monitor | |
| Other names | ProcMon |
| [[Programmer|Original authorTemplate:Pluralize from text]] | Winternals Software |
| [[Programmer|DeveloperTemplate:Pluralize from text]] | Mark Russinovich and Bryce Cogswell |
| Written in | Script error: No such module "If empty". |
| Engine | Page Template:Plainlist/styles.css has no content.Script error: No such module "Check for unknown parameters".Template:EditAtWikidata |
| Operating system | Script error: No such module "If empty". |
| Included with | Sysinternals |
| Available in | English |
| License | Windows: Proprietary commercial software Linux: MIT License[1] |
| Website | Windows SysinternalsScript error: No such module "Check for unknown parameters". |
| Repository | github |
Script error: No such module "Check for unknown parameters".Script error: No such module "Check for conflicting parameters".
Process Monitor is a tool from Windows Sysinternals, part of the Microsoft TechNet website. The tool monitors and displays in real-time all file system activity on a Microsoft Windows or Unix-like operating system. It combines two older tools, FileMon and RegMon and is used in system administration, computer forensics, and application debugging.
Overview
Process Monitor monitors and records all actions attempted against the Microsoft Windows Registry. Process Monitor can be used to detect failed attempts to read and write registry keys. It also allows for filtering on specific keys, processes, process IDs, and values. In addition it shows how applications use files and DLLs, detects some critical errors in system files and more.[2]
History
RegMon and its sister application Filemon were primarily created by Mark Russinovich[3] and Bryce Cogswell, employed by NuMega Technologies and later SysInternals prior SysInternals being bought out by Microsoft in 2006.
The two tools were combined to create Process Monitor.[4][5] Early versions of Process Monitor (up to version 2.8) ran on Windows 2000 SP4 with Update Rollup 1.[6] The current version for Windows only runs on Windows Vista and above.
Initially, ProcMon was only available for Microsoft Windows. In November 2018, Microsoft confirmed it is porting Sysinternals tools, including ProcDump and ProcMon, to Linux.[7] The Linux port of the software is open source. It is licensed under MIT License and the source code is available on GitHub.[8]
FileMon
FileMon (from a concatenation of "File" and "Monitor") was a free utility for 32/64-bit Microsoft Windows operating systems which provided users with a powerful tool to monitor and display file system activity.
FileMon is no longer supported.
RegMon
The RegMon utility from Sysinternals provided forensics on Windows Registry usage.
RegMon is no longer supported.
See also
Lua error in package.lua at line 80: module 'Module:Arguments' not found.
References
Page Template:Reflist/styles.css has no content.
- ↑ Lua error in package.lua at line 80: module 'Module:Citation/CS1/Utilities' not found.
- ↑ Lua error in package.lua at line 80: module 'Module:Citation/CS1/Utilities' not found.
- ↑ Mark Russinovich’s Blog Script error: No such module "webarchive".
- ↑ RegMon for Windows
- ↑ Process Monitor, Microsoft Technet
- ↑ Lua error in package.lua at line 80: module 'Module:Citation/CS1/Utilities' not found.
- ↑ Lua error in package.lua at line 80: module 'Module:Citation/CS1/Utilities' not found.
- ↑ Lua error in package.lua at line 80: module 'Module:Citation/CS1/Utilities' not found.
Script error: No such module "Check for unknown parameters".
External links
- Script error: No such module "Official website".Script error: No such module "Check for unknown parameters".
- GitHub - microsoft/ProcMon-for-Linux
