This page or section is unfinished.
Procmon is a free to use process monitor, it combines the legacy tools Filemon and Regmon.
Download: The Bytecode Club tools page
How to use
Start Process Monitor and capture the activity you want to investigate. Add a filter for the process name or path to reduce the displayed events, reproduce the action, then stop capture. Open an event's properties to inspect its operation, result and details; save the capture if you need to revisit it.
Based on the official Process Monitor documentation.
Take it further.
Find discussionsCompare notes with the people working through the same ideas.