Process Monitor (procmon)

Tool

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 28, 2025

Last Seen

October 28, 2025

API

Process Monitor (procmon) is a Windows Sysinternals tool that provides real-time visibility into file system, registry, and process/thread activity, widely used for troubleshooting, malware analysis, and incident response.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

DLL Hijacking Vulnerability in Windows Narrator Tool Exploited

Oct 29·1 sources

Related Entities

Malware Windows 10 Windows 11 ATBroker.exe Impacket reg.py

Process Monitor (procmon)

Overview

Recent Events

Profile

Attack Types

Platforms

Relationships

Related Clusters (1)

DLL Hijacking Vulnerability in Windows Narrator Tool Exploited

Related Articles (1)

Hack-cessibility: When DLL Hijacks Meet Windows Helpers

Related Entities