How to download and run Microsoft's Process Monitor

  • Article ID: 111549
  • Rating:
  • 3 customers rated this article 2.7 out of 6
  • Updated: 08 May 2014

Using Microsoft's tool Process Monitor, you can gather information to help Sophos Technical Support diagnose a wide range of issues.

For detailed steps (with screenshots) and how to capture system events during computer startup see article 119038.

Applies to the following Sophos product(s) and version(s)

Not product specific

What To Do

To download Process Monitor and for more information see:

  1. Double-click on 'Procmon.exe' to open Process Monitor.
  2. On the Filter menu, ensure that 'Enable Advanced Output' is selected.
  3. On the File menu, ensure that 'Capture Events' is selected.
  4. Re-create the problem.
  5. When the error appears, in Process Monitor, deselect 'Capture All Events'.
  6. Save the results with all events as a .PML file and compress the .PML file to a zip archive.
  7. Send in the zip file from step 5:

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent