When you first open Process Monitor, you will be greeted with an enormous amount of rows and data. Even if a service or application is spawning a new process, changing the file system in some way, or connecting to a network, you can track it with Process Monitor. With Process Monitor, you can see which registry keys are being updated by any application. Process Monitor allows you to capture a log of every single event that happens on your Windows PC. Process Monitor is quite different from Process Explorer.

Process Monitor: The Ultimate Windows Log Next, let's look at some of the more popular tools and how you might want to use them.

There are also a variety of heavy-duty command line utilities that help with everything from network and file share security to advanced Active Directory installations and many more. SDelete, which is a DoD-compliant secure delete program, also cleanses your free space and leaves no traces of previously deleted files. See how to manage Windows Startup programs with Autoruns for more information. Process Explorer, on the other hand, is similar to Windows Task Manager but with a ton of additional features.Īutoruns helps you manage Windows startup processes as well as detect particularly pesky embedded malware. There are tools such as Process Monitor, which monitors file system, registry, process, thread, and DLL activity in real time. Whilst it is unlikely that any one person will ever make use of all the tools available within the suite, there is a plethora of utilities at your disposal.

Sysinternals active directory explorer