Monitor Registry and File Access in Real-time

Here’s a very good tool for system administrators and power users to monitor registry and files access/changes in real-time.

Process Monitor

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.
from microsoft technet

This tool can be downloaded from this link and is only compatible with windows operating systems.

Leave a Reply

Your email address will not be published. Required fields are marked *