Introduction - If you have any usage issues, please Google them yourself
A monitoring process creation and exit example, using the command-line monitoring, a simple modification can change the form of MFC dialog box.
Packet : 97288431procmon.zip filelist
ProcMon/
ProcMon/Code/
ProcMon/Code/ConsCtl/
ProcMon/Code/ConsCtl/ApplicationScope.cpp
ProcMon/Code/ConsCtl/ApplicationScope.h
ProcMon/Code/ConsCtl/CallbackHandler.cpp
ProcMon/Code/ConsCtl/CallbackHandler.h
ProcMon/Code/ConsCtl/Common.h
ProcMon/Code/ConsCtl/ConsCtl.cpp
ProcMon/Code/ConsCtl/ConsCtl.dsp
ProcMon/Code/ConsCtl/CustomThread.cpp
ProcMon/Code/ConsCtl/CustomThread.h
ProcMon/Code/ConsCtl/LockMgr.cpp
ProcMon/Code/ConsCtl/LockMgr.h
ProcMon/Code/ConsCtl/NtDriverController.cpp
ProcMon/Code/ConsCtl/NtDriverController.h
ProcMon/Code/ConsCtl/QueueContainer.cpp
ProcMon/Code/ConsCtl/QueueContainer.h
ProcMon/Code/ConsCtl/QueuedItem.h
ProcMon/Code/ConsCtl/RetrievalThread.cpp
ProcMon/Code/ConsCtl/RetrievalThread.h
ProcMon/Code/ConsCtl/ThreadMonitor.cpp
ProcMon/Code/ConsCtl/ThreadMonitor.h
ProcMon/Code/ConsCtl/WinUtils.h
ProcMon/Code/ProcMon.dsw
ProcMon/Code/ProcObsrv/
ProcMon/Code/ProcObsrv/ProcObsrv.c
ProcMon/Code/ProcObsrv/ProcObsrv.dsp
ProcMon/Output/
ProcMon/Output/ProcObsrv.sys