Process Monitor

"Filemon" redirects here. For the cat, see Przygody kota Filemona.
Process Monitor
Other namesProcMon
Original authorWinternals Software
DevelopersMark Russinovich and Bryce Cogswell
Stable release
v4.02[1] / May 6, 2026; 31 days ago (2026-05-06) (Windows version)
Preview release
v2.0 Preview / July 22, 2024; 22 months ago (2024-07-22) (Linux version)
Written inC++
Operating systemWindows XP SP2 and higher, Linux
Included withSysinternals
Available inEnglish
LicenseWindows: Proprietary commercial software
Linux: MIT License[2]
WebsiteWindows Sysinternals
Repositorygithub.com/microsoft/ProcMon-for-Linux

Process Monitor is a tool from Windows Sysinternals, part of the Microsoft TechNet website. The tool monitors and displays in real-time all file system activity on a Microsoft Windows or Unix-like operating system. It combines two older tools, FileMon and RegMon and is used in system administration, computer forensics, and application debugging.

Overview

Process Monitor monitors and records all actions attempted against the Microsoft Windows Registry. Process Monitor can be used to detect failed attempts to read and write registry keys. It also allows for filtering on specific keys, processes, process IDs, and values. In addition it shows how applications use files and DLLs, detects some critical errors in system files and more.[3]

History

RegMon and its sister application Filemon were primarily created by Mark Russinovich[4] and Bryce Cogswell, employed by NuMega Technologies and later SysInternals prior SysInternals being bought out by Microsoft in 2006.

The two tools were combined to create Process Monitor.[5][6] Early versions of Process Monitor (up to version 2.8) ran on Windows 2000 SP4 with Update Rollup 1.[7] The current version for Windows only runs on Windows Vista and above.

Initially, ProcMon was only available for Microsoft Windows. In November 2018, Microsoft confirmed it is porting Sysinternals tools, including ProcDump and ProcMon, to Linux.[8] The Linux port of the software is open source. It is licensed under MIT License and the source code is available on GitHub.[9]

FileMon

FileMon (from a concatenation of "File" and "Monitor") was a free utility for 32/64-bit Microsoft Windows operating systems which provided users with a powerful tool to monitor and display file system activity.

FileMon is no longer supported.

RegMon

The RegMon utility from Sysinternals provided forensics on Windows Registry usage.

RegMon is no longer supported.

See also

References

  1. ^ "Process Monitor - Windows Sysinternals". learn.microsoft.com.
  2. ^ "Process Monitor for Linux (Preview)". Sysinternals. 30 October 2022.
  3. ^ "Download Process Monitor (ProcMon)". BleepingComputer.
  4. ^ Mark Russinovich’s Blog Archived 2015-05-30 at the Wayback Machine
  5. ^ RegMon for Windows
  6. ^ Process Monitor, Microsoft Technet
  7. ^ "How to use Sysinternals Process Monitor and Process Explorer to Troubleshoot SharePoint". Archived from the original on 2011-08-20. Retrieved 2011-08-01.
  8. ^ Cimpanu, Catalin (5 November 2018). "Microsoft working on porting Sysinternals to Linux". ZDNet. CBS Interactive. Retrieved 5 November 2018.
  9. ^ "Process Monitor for Linux (Preview)". GitHub. 24 October 2021.
Stub icon

This Microsoft Windows article is a stub. You can help Wikipedia by adding missing information.

Content Disclaimer

Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.

  1. The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
  2. There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
  3. It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
  4. Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
  5. Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.