
Because this one is so much more verbose, I have to warn you with caution that if you are trying to use it on a older/weaker computer as it may crash the system do to system overload.

This tool will show what files and registry keys a process is try read/delete/modify, what is being written to registry/file system whenever changes are made. Process Monitor is similar to process explorer, only it shows you much more verbose information about what a process is doing. Second is the Process Explorers close cousin, Process Monitor. It even has built-in Google searching for looking up further info on the internet about a process.

There is very little that this tool won't tell you from a basic level. this application will tell what processes are running, whether they are a sub process of another, who the owner of the process is, what files are in use by that process, the time in which it started, its path, etc.

I really don't know why Micorsoft doesn't just replace one for the other. I typically use a combination of two tools when I doing this.įirst Process Explorer, which is basically Task Manager on crack.
