procmon.exe

  1. REDIRECT Process Monitor