Using Process Monitor to Monitor File Access on Windows

用個實例來說，如果我想在XP/2003/Vista下觀察IIS的活動，可以設定以下的Filter: Process Name is 'w3wp.exe' 這樣子ProcMon會抓到所有w3wp.exe對File及 ...

This is a repository consisting of process monitor filters sets, that when used during analysis tasks can significantly aid events list reading.

Process Monitor 功能概觀 · 針對作業輸入和輸出參數擷取更多資料 · 非破壞性篩選可讓您設定篩選條件，而不會遺失資料 · 擷取每項作業的執行緒堆疊，以便在許多 ...

Process Monitor includes powerful monitoring and filtering capabilities, including: More data captured for operation input and output parameters ...

How to Use Process Monitor · Select the Process Monitor Filter | Filter... menu item. This will display the Process Monitor Filter dialog.

I am using Sysinternals Process Monitor to debug some incoming events and now I am trying to create a filter on Path and using wildcards.

Process Monitor has a mechanism for saving multiple filter settings: Arrange your filter as you like; Select menu Filter > Save Filter.

Click on 'Filter' in the GUI then click 'Filter' in the drop down menu. 5. Now change the first drop down menu to 'Path', change the second drop down menu ...

Support may request that process monitor be configured with certain filters when attempting to gather more information on an issue.