
Personally, I use it the most when I want to track activity on a particular file or track exactly what a certain process is doing. With Process Monitor, you can capture process details, including image path, command line, user and session ID configure the GUI to have it present whatever columns are of interest set include/exclude filters for any data field-even those whose columns are not displayed and much more. Don't worry, though-you'll learn how to filter the data so that you can hone in on exactly what you want to monitor without being overwhelmed with data you don't care about. In fact, its default configuration makes it too good because you are quickly overwhelmed by how much data gets presented to you. Process Monitor is great for monitoring all the activity that goes on for all the processes on your system. Another tip talks about their Process Explorer, so I thought I'd introduce you to their Process Monitor tool.

The folks at Sysinternals produce some high-quality and very useful Windows tools.
