I'm sure there's a way to do this, in fact I think I've done it myself a long time ago... I'm looking for a way to monitor an executable to see what files and directories it is accessing whilst running.
What's the best way to do it?
Printable View
I'm sure there's a way to do this, in fact I think I've done it myself a long time ago... I'm looking for a way to monitor an executable to see what files and directories it is accessing whilst running.
What's the best way to do it?
Try RegMon or FileMon from Microsoft.Quote:
Originally Posted by Batman
RegMon for Windows
FileMon for Windows
Thought those had gone the distance now, and are both included in the newer ProcessMonQuote:
Originally Posted by danrhodes
Quote:
Originally Posted by Hightower
I stand corrected "FileMon and Regmon are no longer available for download. They have been replaced by Process Monitor on versions of Windows starting with Windows 2000 SP4, Windows XP SP2, Windows Server 2003 SP1, and Windows Vista."
My Bad! :-(
D
Still, you tried to help and that's the main thing :)
Pretty powerful tools - once you get your head around them!
I've been doing my MCP training for XP, and it's unbelievable what you can do with some of the standard tools when you know how to use them properly!Quote:
Originally Posted by Batman
Process Explorer can do this too and may be a better option than Process Monitor. It really depends on what you are trying to achieve.Quote:
Originally Posted by Batman