7 ms·

What are the use cases when I should prefer this over good old ProcMon?

• lowleveldesign 10y ago
  This tool is not supposed to compete with ProcMon, which I consider the best tool of the trade. But... currently ProcMon can't be run on Nano Server (thus for instance on Docker). ProcMon does not trace RPC/ALPC requests either. I even suggest in the wiki that you may pipe the output of wtrace to ProcMon (I wrote a simple tool send2procmon [1] for this purpose): wtrace notepad | select-string "Rpc.*Call" | send2procmon [1] https://github.com/lowleveldesign/send2procmon https://github.com/lowleveldesign/send2procmon
  • youdontknowtho 10y ago
    really fantastic stuff, man. read both blog posts, really impressed. Thanks!
    • lowleveldesign 10y ago
      Thank you!