question

MikeM-6420 avatar image
0 Votes"
MikeM-6420 asked

Procmon 3.8x doesn't display process name, path, cmdline, nor user in the Event Properties page for PML files

After upgrading to Procmon v3.83, 3.84, and 3.85 recently, I noticed that the Event Properties page \ Process tab doesn't populate with all of the expected info, when viewing events from saved PML files. If I view properties for events in a live trace, the info is populated, but the same thing on a saved trace results in an incomplete dialog. This issue cropped up with a recent upgrade; I don't remember seeing this issue prior to v3.80 (and I use it nearly every day). The process information is saved in the PML file as it's visible in the main window, but the properties page doesn't display it.

windows-sysinternals-procmon
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

0 Answers