Process Monitor 3.89

Process Monitor is a tracking tool for Windows. Displays the activity of the file system, registry, as well as processes and threads in real time. including advanced and harmless filtering, comprehensive event properties such as session IDs and user names, reliable process information, a full-fledged flow stack with built-in support for all operations, simultaneous recording of information to a file, and many other features.

These unique features make Process Monitor a key tool for troubleshooting and getting rid of malware.

Features:

• tracking the startup and shutdown of processes and threads, including information about the termination code,
• tracking the loading of images (DLL libraries and device drivers running in kernel mode),
• more data collected about the parameters of input and output operations,
• harmless filters that can be installed on any field with data, allow you to install filters that will not lead to data loss,
• collecting thread stacks for each operation allows in most cases to determine the original reason for the operation,
• reliable collecting information about processes, including the path to the process image, the command line, as well as the user and session ID,
• the advanced architecture of logging extends the capabilities of the program to tens of millions of registered events and gigabytes of recorded event data,
• the process tree displays the relationships between all the processes listed in the trace information,
• detailed hints allow you to get convenient access to formatted data that does not fit in the column,
• terminated search,
• logging of all operations during system boot.