| Logging Program Activity |
Previous Top Next |
| · | Files read, written, created, or opened by the program |
| · | Directories that are opened, or enumerated by the program |
| · | Registry Keys created, read, written, or accessed by the program |
| · | COM / ActiveX control creation |
| o | COM Activity, including monitoring calls to instances of IUnknown, IClassFactory, IClassFactory2, Idispatch, IExternalConnection, IMarshal, and more. |
| · | DLLs loaded by the program |
| · | Function calls to operating system |
| · | DLL or EXE Resource access |
| · | Thread creation and destruction |
| · | DllMain entry calls for loaded/unloaded DLLs and threads created |
| · | External programs executed by your program, Thinstall can continue tracing the external program to a separate log file |
| · | Process shutdown procedures (DLL frees, memory deallocations, etc) |
| · | Virtual Memory allocation / frees |
| · | Memory mapped file creation / destruction |