how to run ProcMon on Windows Core edition (CMD or Powershell)

Question

Hello,

I'm planning to monitor a process by ProcMon, and I need the output to be on the shell not on the GUI. any clue how can I run it using a CMD or PowerShell command?

Answer 1

Hi @Basel Al Sayeh - ITG ,

View the Process Monitor Usage at the command line via:

Procmon /?

For example, to capture the for five minutes and output to specified file path:

Procmon /OpenLog <Logfile.PML> /Runtime 300 /Minimized /Quiet /SaveAs <filepath>

Cheers,
Carnegie