Process Monitor is a tool from Windows Sysinternals, part of the Microsoft TechNet website.

It combines two older tools, FileMon and RegMon and is used in system administration, computer forensics, and application debugging.

Process Monitor can be used to detect failed attempts to read and write registry keys.

In November 2018, Microsoft confirmed it is porting Sysinternals tools, including ProcDump and ProcMon, to Linux.

[9] FileMon (from a concatenation of "File" and "Monitor") was a free utility for 32/64-bit Microsoft Windows operating systems which provided users with a powerful tool to monitor and display file system activity.