Skip to main content

All Questions

0 votes
0 answers
451 views

Is it possible to use procmon to find out why a process ends?

Let's say I started notepad. In a PowerShell window, I run ps notepad | Stop-Process -Force to kill all notepad session. I captured a procmon trace during these operations. Is it possible to find out ...
Fajela Tajkiya's user avatar
1 vote
1 answer
471 views

How to enable "View Source" in Process Monitor?

Sysinternals Process Monitor has a button to "view the source" on a Event Properties > Stack element: It is disabled in my trace. What do I need to enable it?
TheUnexpected's user avatar
3 votes
2 answers
13k views

Is there a version of Process Monitor that runs on Windows 2000?

I have a problem I'm trying to track down on a Windows 2000 machine. I downloaded SysInternals Process Monitor (ProcMon.exe) but it seems to need Windows XP SP2 or higher. I've seen traffic that ...
rossmcm's user avatar
  • 1,596