There are lots of useful tools on website [url]http://live.sysinternals.com/[/url], for example, we can use Procmon.exe to monitor the processes.