Process Monitor displays both file system and registry activities in real-time, combining the features of FileMon and RegMon. Additional features includes live changes (autoscroll), non-destructive filtering, comprehensive event properties such session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, file logging etc.
Alternatively, Process Monitor Portable is also available, which is stealth.
