Then the filter will be added as shown below.The contents of the filter are displayed as they are, but it means that the 'Process Name' filters the log of 'explorer.exe' and displays it.

Then, the screen for setting the filter will appear as shown below.Ĭlick the list on the far left to display the pull-down menu, and from that, ' Process Name'Click.After that, I want to track Text box with process nameEnter in ' AddClick the button.

This allows you to track the logs of a single process.įirst of all Green ○Surrounded by Filter buttonClick. This time, as a more practical method of investigation, Filter by process nameLet's play. Then it is working now like this Process operating statusWill be displayed.Īs a simple operation method, Red ○With the button in the part surrounded by Real-time scrolling and pausingToggle.īlue frameThe part surrounded by Type of operation(For example, if it's a registry mark Registry(Operations for) are filtered. Since User Account Control may be activated, ' YesClick to continue. If there is no problem, ' AgreeClick to proceed. The license will be displayed when you start it for the first time. Looking at the unzipped folder, 'Procmon.exe' ' Procmon64.exeThere are three types of executable files: 'Procmon64a.exe'.įor 32 Bit respectively, For 64bit, Because it is for other architectures According to the Windows environment to be investigatedPlease start. * Installation work is not required, so please store it in your favorite location after decompressing. ' ProcessMonitor.zipWill be downloaded, so unzip it and you're ready to go. * This is the version as of November 2020, 11. Red frameClick the download link in to start downloading. If you move to the above page, the following download page will be displayed.

Procmon64 exe