John Zane
Reputation: 888
Monitoring IO like Sysinternals' ProcMon
How does the Process Monitor from Sysinternals monitor file IO activity like it does? If you enable the advanced information, you can see that calls that were previously shown as CreateFile are now shown as IRP_MJ_CREATE which suggests that it hooks some rather low level stuff. Does anyone know exactly what it hooks/how it works?
Upvotes: 3
Views: 3528
Answers (1)
Related Questions
- Is there an equivalent to the .Net FileSystemWatcher in the Linux world?
- Monitor files similar to System Internal's/Microsoft's FileMon/Process Monitor
- Monitoring Windows system Read/Write operations by process?
- C# - How to monitor a process' file read/write operations?
- Tool for IO analysis?
- How to measure characteristics of file (hard-disk) I/O?
- How to monitor process' IO activity using C#?
- Disk IO profiler for existing applications
- Monitor disk activity programmatically (Windows)
- How can I monitor disk access for a certain file?