Windows Diagnostic Tool
Microsoft Process Monitor (ProcMon)
Advanced Microsoft Sysinternals utility for monitoring real-time file system, Registry, process, thread, and DLL activity
QUICK START
How to use it
- Step 1
Download Process Monitor
Download Process Monitor from the official Microsoft Sysinternals page.
- Step 2
Extract and launch ProcMon
Extract the downloaded archive and run Process Monitor. Use administrator rights if the troubleshooting task requires elevated access
- Step 3
Accept the license terms
Accept the Sysinternals license agreement when Process Monitor opens for the first time
- Step 4
Start capturing events
Process Monitor begins capturing activity in real time. Reproduce the problem you are trying to diagnose
- Step 5
Apply filters
Use filters such as Process Name, Path, Result, or Operation to reduce the event list and focus on the relevant activity
- Step 6
Review the Events
Look for repeated failures, access denied results, missing files, Registry errors, or other events connected to the problem