Process and REGISTRY live viewing

kasper77 · Nov 10, 2009

Hi Geeks,
I want a program that does the following.
If I start a program I want to see what that program calls up ie dlls etc and also what registry entries it checks and any other file that it uses.
Now I know about a few progs but I want to watch as the program starts all the things it does as it interacts with the system.

Can any of you guys suggest one? or for that matter a couple?
Big thanx

theefool · Nov 10, 2009

Process monitor should be able to do what you want:

http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

* More data captured for operation input and output parameters
* Non-destructive filters allow you to set filters without losing data
* Capture of thread stacks for each operation make it possible in many cases to identify the root cause of an operation
* Reliable capture of process details, including image path, command line, user and session ID
* Configurable and moveable columns for any event property
* Filters can be set for any data field, including fields not configured as columns
* Advanced logging architecture scales to tens of millions of captured events and gigabytes of log data
* Process tree tool shows relationship of all processes referenced in a trace
* Native log format preserves all data for loading in a different Process Monitor instance
* Process tooltip for easy viewing of process image information
* Detail tooltip allows convenient access to formatted data that doesn't fit in the column
* Cancellable search
* Boot time logging of all operations
Click to expand...

kasper77 · Nov 11, 2009

Thanx / it is good but I am still missing a couple of things but I will keep looking

Log in or Sign up

Process and REGISTRY live viewing

kasper77 Private E-2

theefool Geekified

kasper77 Private E-2