Windows · Security & Antivirus
Process Monitor
Process Monitor is an advanced monitoring tool for Windows
Version 4.12.0 · by Mark Russinovich
Official site: learn.microsoft.com
About Process Monitor
Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. It combines the features of two legacy Sysinternals utilities, Filemon and Regmon, and adds an extensive list of enhancements including rich and non-destructive filtering, comprehensive event properties such as session IDs and user names, reliable process information, full thread stacks with integrated symbol support for each operation, simultaneous logging to a file, and much more. Its uniquely powerful features will make Process Monitor a core utility in your system troubleshooting and malware hunting toolkit.
How to install Process Monitor
- Click Download — the developer's official website opens in a new tab.
- Download the latest version there and run it. Choose Custom/Advanced where offered, and skip any bundled extras.
- Prefer the command line? With Chocolatey you can install and update it with: choco install process-monitor
- Open Process Monitor once it finishes installing.
Frequently asked questions
Is Process Monitor free to download?
Yes. The Download button sends you to learn.microsoft.com, the developer's official site, where Process Monitor is available to download. Grabware doesn't host or modify any files.
What is the latest version of Process Monitor?
The version listed here is 4.12.0, published /Date(1792. The developer's site always has the newest release.
How do I install Process Monitor from the command line?
With Chocolatey, run: choco install process-monitor. This installs it from the official source and keeps it updated.
Is Process Monitor safe?
Process Monitor downloads directly from the developer. As always, scan the installer with your antivirus and choose Custom setup to skip any bundled extras.
Alternatives to Process Monitor
More
Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014 (KB2919355)This update is a cumulative update that includes the security updates and the non-security updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2…
Security update for Windows kernel: March 10, 2015This security update resolves privately reported vulnerabilities in Windows.
Microsoft security advisory: Availability of SHA-2 code signing support for Windows 7 and Windows Server 2008 R2: March 10, 2015The update adds SHA-2 hashing algorithm signing and verification support to Windows 7 and Windows Server 2008 R2
Foxit PDF ReaderThe industry's most powerful PDF Reader solution.