Training
Module
Monitor and troubleshoot Windows client performance - Training
This module explores methods and tools for monitoring and troubleshooting Windows client performance issues.
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
By Mark Russinovich
Published: June 20, 2024
Download Process Monitor (2.9 MB)
Download Procmon for Linux (GitHub)
Run now from Sysinternals Live.
Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such as session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.
Process Monitor includes powerful monitoring and filtering capabilities, including:
The best way to become familiar with Process Monitor's features is to read through the help file and then visit each of its menu items and options on a live system.
Download Process Monitor (2.9 MB)
Run now from Sysinternals Live.
Runs on:
Training
Module
Monitor and troubleshoot Windows client performance - Training
This module explores methods and tools for monitoring and troubleshooting Windows client performance issues.
Documentation
Process Explorer - Sysinternals
Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more.
List all the DLLs that are currently loaded, including where they are loaded and their version numbers.
This handy command-line utility will show you what files are open by which processes, and much more.