I want to understand and track what an executable program/application/process is doing my computer. How can I find all the files (like ouput files, log files, etc.) that it has opened or is accessing when it is running?
You can use Process Explorer's handle viewer ( View->Lower Pane View->Handles ) to see all of the files a process has open on a Windows machine. Save this answer. Show activity on this post. As another answer suggests process explorer will show you currently open file handles for a process.
Step 1: Go to the Start menu, press the Windows key, and type Resource monitor in the search box. Now, select Resource monitor and click open. Another technique is to run task manager, select the performance tab and click Open Resource Monitor.
Process Explorer has a second pane, showing all open handles:
Also Process Monitor can monitor and log all registry and file access from a process.
Process Monitor sounds exactly what you are looking for.
Just find your process and it tells you in detail what the process is doing, more so than Process Explorer.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With