New tool offered by the fine folks formerly known as Sysinternals:
Process Monitor v1.0: http://www.microsoft.com/technet/sysint ... nitor.mspx
Quoting:
"Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit."
"Process Monitor runs on Windows 2000 SP4 with Update Rollup 1, Windows XP SP2, Windows Server 2003, and Windows Vista as well as x64 versions of Windows XP, Windows Server 2003 and Windows Vista."
It seems to unpack, run and execute very similar to Process Explorer. Thus it can be ported easily and doesn't seem to make any more demands on registry entries than Process Explorer does. Shouldn't be too difficult to consider "portable" but I haven't thoroughly vetted it with with RegWatcher yet.
Looks to be very useful. I've enjoyed playing with it this afternoon at work.
Sysinternals Process Monitor: New Sysinternals Tool!
-
- Posts: 11
- Joined: Sat Aug 12, 2006 6:26 am
- Location: Houston, Texas
- Contact:
- Andrew Lee
- Posts: 3063
- Joined: Sat Feb 04, 2006 9:19 am
- Contact:
Process Monitor
It's stated in the database that:
What is Procmon64a.exe supposed to do? If I try to run it in Windows 10 64-bit, then I get an error.2. Delete Eula.txt and Procmon64a.exe
- Attachments
-
- Oops
- procmon64a error.png (7.79 KiB) Viewed 9888 times
-
- What does the version called "a" do?
- procmon64a.png (1.77 KiB) Viewed 9893 times
Sysinternals Process Monitor: New Sysinternals Tool!
I think it's an ARM version for computers which have an ARM processor, such as Microsoft Surface Pro X.
My YouTube channel | Release date of my 13th playlist: August 24, 2020
Re: Sysinternals Process Monitor: New Sysinternals Tool!
Correct. You can examine the executable with sigcheck, another Sysinternals tool:
Code: Select all
MachineType: 64-bit ARM
Re: Sysinternals Process Monitor: New Sysinternals Tool!
If you've been interested in finding Windows tweaks, learning about the registry, or other testing, I have to say Process Monitor has a lot to offer. As I've been digging further into Windows software testing, I found a detailed breakdown on the program:
Using Process Monitor to Troubleshoot and Find Registry Hacks
https://www.howtogeek.com/school/sysint ... o/lesson5/
Using Process Monitor to Troubleshoot and Find Registry Hacks
https://www.howtogeek.com/school/sysint ... o/lesson5/
Re: Sysinternals Process Monitor: New Sysinternals Tool!
Here's a few more tidbits about Windows processes using Sysinternals Tools - videos #s 7-12 are very techy but also very good... hang in there, some good stuff.
-> https://www.youtube.com/playlist?list=P ... DwNdEebYGC
-> https://www.youtube.com/playlist?list=P ... DwNdEebYGC