Following this entry: exe files being deleted
I was able to setup process monitor to be run from the command line and to log to file.
The issue is that the log file get corrupted upon system restart.
Is there a way to gracefully stop procmon?
Following this entry: exe files being deleted
I was able to setup process monitor to be run from the command line and to log to file.
The issue is that the log file get corrupted upon system restart.
Is there a way to gracefully stop procmon?
Yes. Run
procmon /AcceptEula /terminate
to gracefully stop any running procmon trace.