Monitoring an Executable

[Batman]

I'm sure there's a way to do this, in fact I think I've done it myself a long time ago... I'm looking for a way to monitor an executable to see what files and directories it is accessing whilst running.

What's the best way to do it?

[mavhc]

Process Monitor

[danrhodes]

I'm sure there's a way to do this, in fact I think I've done it myself a long time ago... I'm looking for a way to monitor an executable to see what files and directories it is accessing whilst running.

What's the best way to do it?

Try RegMon or FileMon from Microsoft.

RegMon for Windows
FileMon for Windows

[Hightower]

Try RegMon or FileMon from Microsoft.

RegMon for Windows
FileMon for Windows

Thought those had gone the distance now, and are both included in the newer ProcessMon

[danrhodes]

Thought those had gone the distance now, and are both included in the newer ProcessMon

I stand corrected "FileMon and Regmon are no longer available for download. They have been replaced by Process Monitor on versions of Windows starting with Windows 2000 SP4, Windows XP SP2, Windows Server 2003 SP1, and Windows Vista."

My Bad! :-(

D

[Batman]

Still, you tried to help and that's the main thing

Pretty powerful tools - once you get your head around them!

[Hightower]

Still, you tried to help and that's the main thing

Pretty powerful tools - once you get your head around them!

I've been doing my MCP training for XP, and it's unbelievable what you can do with some of the standard tools when you know how to use them properly!

[Arthur]

I'm looking for a way to monitor an executable to see what files and directories it is accessing whilst running.

Process Explorer can do this too and may be a better option than Process Monitor. It really depends on what you are trying to achieve.