-
Notifications
You must be signed in to change notification settings - Fork 19
Description
I start procmon with/Backingfile output.pml.
Start-Process -FilePath "procmon.exe" -ArgumentList "/Quiet /Minimized /Backingfile output.pml /LoadConfig ProcessMonitorPmcFile.pmc" -Verbose
It starts to create output.pml, output-1.pml up to output-21.pml
After a while the files output.pml, output-1.pml up to output-5.pml are deleted.
But this call is working
Start-Process -FilePath "procmon.exe" -ArgumentList "/OpenLog output.pml /SaveApplyFilter /SaveAs temp_output.csv" -Wait -Verbose
But the file output.pml does not exist anymore.
My question, will i miss any captured events?
I have 600 GByte free disk space.
procmon version 4.1.0.0
This is the ProcessMonitorPmcFile.pmc file:
ProcessMonitorPmcFile.txt
Enable ring buffer is disabled
Settings are both grayed out
