question

BruceWayne-2492 avatar image
0 Votes"
BruceWayne-2492 asked ·

Filters are great but they appear to default to AND logic versus OR logic - why not offer both? Throw up a checkbox and be done with it.

I love the process monitor software. It's great for detailed information. I'm no expert about using it since I have just started recently but it appears to me that the filters are using AND logic where EVERY filter has to be true to display a captured event. I couldn't understand why some events were not being captured. I was just assuming OR logic. Why not offer both as options for the end user? Throw up a checkbox on the filter screen selecting AND or OR logic so that the end user can make their own decisions about the logic to use.

windows-sysinternals-procmon
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Castorix31 avatar image
0 Votes"
Castorix31 answered ·

If it used AND, you could not watch several processes...

For example, this watches mmc OR SystemSettings.exe processes :

74941-procmon.jpg




procmon.jpg (81.7 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.