Version 1.2

Jul 25, 2007 13:20 GMT  ·  By

Microsoft has updated the Process Monitor tool from Sysinternals to version 1.2 and made it available for download on July 24. Process Monitor will permit users to watch over every nook and cranny of their Windows Vista. The utility is compatible with both 32-bit and 64-bit editions of the latest Microsoft operating system but also with a range of additional Windows platforms. Windows 2000 SP4 with Update Rollup 1, Windows XP SP2, Windows Server 2003 SP1, also x86 and x64 can also seamlessly integrate Process Monitor 1.2.

"Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit," reveals the description of the toll put together by Microsoft's Mark Russinovich and Bryce Cogswell.

Enhancing the capabilities delivered by both Filemon and Regmon, Process Monitor 1.2 will also permit users to cancel searches, keep an eye on the boot time logging of operations, and perform advanced monitoring including processes and threads at startup and exit but also of the loading of DLL and kernel-mode device driver. Process Monitor additionally enhances the volume of captured data for the parameters associated with operation input and output and introduces non-destructive filters.

Version 1.2 of Process Monitor brings to the table "capture of thread stacks for each operation, reliable capture of process details, including image path, command line, user and session ID, configurable and moveable columns for any event property, advanced and scalable logging architecture, native log format preserves all data for loading in a different Process Monitor instance, process tooltip for easy viewing of process image information and detail tooltip allows convenient access to formatted data that doesn't fit in the columna," Microsoft added.

Microsoft Process Monitor 1.20 was tested by Softpedia as being 100% Free and is available for download here.