For example, process notepad.exe created there should be a log entry in the log file.
Is there any such tool in windows?
Process Lasso fits your needs, plus more powerful features
Mark Russinovich created the tool Sysmon which logs activity in Windows:
System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log. It provides detailed information about process creations, network connections, and changes to file creation time.
Look if this tool is enough and logs the information you need.
answered Feb 24 '16 at 16:28
