
The Linux version comes without the help file that the Windows version of Procmon includes. Procmon is a powerful system monitoring tool for advanced uses. sudo procmon -f procmon.db // opens the trace file procmon.db within the interface.sudo procmon -p 1337 -e read,write,openat // traces syscalls read, write, and opennat of process 1337.sudo procmon -p 1337 -c procmon.db // traces the process 1337 in headless mode and saves the data to the file procmon.db.sudo procmon // runs the process monitor tool to trace all processes and syscalls.Here are a few example commands that you may run: You may run procmon -h after installation to display the help screen.

deb file from the releases section on the project's GitHub page. wget -q $(lsb_release -rs)/b -O bīuild instructions are provided as well on the project's GitHub website, and Linux users may download a.Installation instructions on Ubuntu 18.04 devices are straightforward. Microsoft plans to add more configurations to the system requirements in the future to take these systems into account. Several users tried to build or install the process monitor tool on Ubuntu 20.04 systems and failed. Since it is released as a preview, it is limited to systems running Ubuntu 18.04 with kernel 4.18 up to 5.3 at the time of writing. The open source tool has been released as a preview. The Linux version of Procmon is now available on GitHub. The program is highly configurable, supports non-destructive filters, the capturing of thread stacks, process details capturing, and boot time logging of operations. It is a powerful tool that supports logging the information to files for later analysis.


Process Monitor is an advanced monitoring tool for Windows that displays real-time data such as Registry, process and thread activity.
