- Reaction score
- 1,699
Process Forensics
Procmon is a powerful forensic tool and part of the sysinternals suite that can help you monitor almost any activity on your system. In this forensics tutorial we will look at an infected Windows 11 VM using Process Monitor.
Sysinternals Suite - Sysinternals
The Windows Sysinternals troubleshooting Utilities have been rolled up into a single suite of tools.
learn.microsoft.com
Last edited: