0

I do not want to debug the code within the program, I simply want to know what external resources it accesses - files, connections, registry, etc... Is there an easy way to do this in Windows?

youcantexplainthat
  • 161
  • 5

1 Answers1

2

You can use utilities from sysinternals package, such as process monitor.

w s
  • 8,458
  • 1
  • 24
  • 40
  • Doesn't that only list what resources it currently has opened? I'm looking for a history of what it touched/opened in detail as it started/ran/closed. – youcantexplainthat Sep 16 '14 at 15:07
  • 1
    No, it logs access to system resources. – w s Sep 16 '14 at 15:09
  • Or ApiMonitor for that matter :) – Dominik Antal Sep 16 '14 at 16:41
  • @dominik-antal : ApiMonitor search turns up a few things. Can you be specific?

    w-s : Processmonitor is not being specific. It only lists full directories and key branchs the program accesses, not specific keys or files. ...and doesn't provide a timestamp of first/last access. Saying "HKCU" in the lower panel isn't useful.

     – youcantexplainthat Sep 16 '14 at 18:39
  • Are you running process monitor as administrator ? – w s Sep 16 '14 at 20:34
  • Yes. I notice that some entries in the lower panel are more specific so is it possible the application is requesting the entire registry tree (all HKLU) and all files under a directory? – youcantexplainthat Sep 16 '14 at 21:10
  • 1
    Would you post the application log somewhere? It is a bit hard to solve problems blindly. – w s Sep 17 '14 at 06:27