networkopk.blogg.se - Ms process monitor

It intercepts system function calls for the following operations: access to the file system, registry, process activity, network connections. When ProcMon starts, it installs a special system driver PROCMON20.SYS. When you start Process Monitor for the first time, a license agreement (EULA) appears on the screen that requires user confirmation. Extract the archive and run the procmon.exe ( procmon64.exe) executable file as an administrator. Process Monitor does not require installation. ProcMon is not a built-in system utility, so you must download it manually from the Microsoft website. This is useful for diagnosing slow Windows boot.

Log all operations during system boot (starting processes, services).

For example, about the actions of a specific process, access to a specific file or a registry key

Set filters to display only the necessary information.

Collect data on the parameters of input and output operations.

Track the startup and shutdown events of processes and threads, including information about the exit code.

The ProcMon combines the capabilities of two legacy Sysinternals utilities at once - FileMon and RegMon.

This utility allows you to show how processes access files on disk, registry keys, remote resources, etc. The Process Monitor (ProcMon) tool is used to track the various processes activity in the Windows operating system.