进程监视器是一种用于 Windows 的高级监视工具,可显示实时文件系统、注册表和进程/线程活动。 它结合了两个传统 Sysinternals 实用程序 Filemon 和 Regmon 的功能,并添加了广泛的增强功能列表,包括丰富的非破坏性过滤、会话 ID 和用户名等综合事件属性、可靠的进程信息、具有集成符号支持的完整线程堆栈。 操作、同时记录到文件等等。 其独特的强大功能将使 Process Monitor 成为系统故障排除和恶意软件搜寻工具包中的核心实用程序。
(Process Monitoris an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities,FilemonandRegmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.)