Process monitor is a monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. it combines the features of two legacy Sysinternals utilites, Filemon, Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, event properties such session IDs and user names, process information, full thread stacks with integrated symbol support for each operation, simultatioeous logging to a file, and more.