The program displays real-time reports on a host of system activities, including file system actions, Registry reads/ writes, application launches, thread creations and deletions, keypresses, user and clipboard actions.
The bad news: some older 32-bit-only monitoring features, such as DeviceIoControl, have been dropped.
The good news: there’s still more power here than many similar tools, and now, at last, MultiMon is also fully compatible with Windows 10.
The program remains easy to set up and use. Check boxes for each monitor you’d like to activate, select a View tab, click Start and watch the real-time report
The other major improvement in this build is the addition of include and export filters. Enter a process name, say, and you’ll see actions relating to that process only.
MultiMon’s simplicity has a lot of appeal. The interface doesn’t overwhelm you with options, and it’s easy to figure out the basics.
Run the program, check “File System” and “Registry”, click All > Start, and you’re immediately seeing what’s going on. Click Stop when you’re done, use a tab to see one type of action only (just Registry accesses, say), or type text in the Filter box to find matches.
Overall, it’s a likeable product and may be useful for novice troubleshooters. But Process Monitor still wins our system-watching vote for its extra detail, much more powerful filtering, portability and no-strings freeware license.
MultiMon 3.0 is a free-for-personal-use application for Windows 7 and later.