You will find this pointer in the very first (summary) post of this thread:
Useful Windows Tools for analysis
Resource Monitor
- …
Process Monitor
- Provided by Microsoft for free via the regular app store as part of the
Sysinternals Tools
. - Performs a highly detailed analysis of almost all system activities
- … by obtaining a full event recording for a certain period of time.
- Process Monitor - Sysinternals | Microsoft Learn
- Provided by Microsoft for free via the regular app store as part of the
After some time I noticed that Process Monitor
does not really “record” the process activity but it “only” takes samples of the activity. So the recording is not 100% of all activity … but it feels like 80 to 90% of all file access gets recorded.
(OK … I should have read the documentation of Process Monitor
… because this is clearly spelled out there … so I guess a lazy goose must discover it the hard way)
Process Monitor
also allows a CSV export of the recordings which I then “post-process” … with find-replace-grep-sort-count etc.