System - Monitoring (52)

SoundVolumeView displays general information and current volume level for all active sound components on your system, allowing instant mute/unmute. This is useful both for viewing audio management details as well as tracking down (and silencing) a given program sound from your system. Additionally, the program also allows for loading or saving custom sound configurations for a given situation or toolset. A config file contains volume level, mute/unmute state of all sound components and default sound devices.

A command-line interface is also available with extensive support, allowing you to save/load profiles, change the current volume of every sound component and mute/unmute every sound component.

simplewall is a program to manage network network activity on your computer. Includes the ability to create and edit your own rules and an internal blocklist, including Windows own spy/telemetry connections. The program can also prompt you for each new connection by a program to allow either full or limited connections.

Works with the Windows Filtering Platform (WFP) on your computer.

TcpLogView monitors the opened TCP connections on your system and adds a new log line every time that a TCP connection is opened or closed. For every log line, the following information is displayed: Even Time, Event Type (Open, Close, Listen), Local Address, Remote Address, Remote Host Name, Local Port, Remote Port, Process ID, Process Name and the country information of the Remote IP.

FileActivityWatch displays information about every read/write/delete operation of files occurs on your system. For every file, it displays the number of read/write bytes, number of read/write/delete operations, first and last read/write timestamp and the name/ID of the process responsible for the file operation.

EventLogChannelsView shows the list of all event log channels on your system, including the channel name, event log filename, enabled/disabled status, current number of events in the channel and more. It allows you to make some actions on multiple channels at once: enable/disable channels, set their maximum file size and clear all events stored in the channels.

FullEventLogView displays in a table the details of all events from the event logs of Windows, including the event description. It allows you to view the events of your local computer, events of a remote computer on your network, and events stored in .evtx files. It also allows you to export the events list to text/csv/tab-delimited/html/xml/json file.

Core Temp is a small footprint yet powerful program to monitor processor temperature and other vital system information. The program can track temperatures on individual processor cores, useful for advanced diagnostics or checking that cooling tools are functioning properly.

GUIPropView displays extensive information about all windows currently opened on your system. All top-level windows are displayed in the upper pane and, when selected, the lower pane lists selected child windows.

Controls include the ability to select one or more items and close, hide, show, minimize, maximize, disable, enable etc. You can also click-and-drag the targeting object to point to identify and select a given Window.

Window listing and status details can be exported to a text file or HTML report.

MJ Registry Watcher is a system tray program that monitors and alerts you to changes to any registry keys files or folders. The default set of keys and files should ensure that nothing gets run at startup without your knowledge and important boot up files don't get changed behind your back, but you can configure it to suit your own needs. The program can also keep a full history of alerts in a log file.

HandleCountersView shows the current number of handles (File, Directory, Token, Job, Thread and so on...) opened by every process running on your system and the change in number of handles since the last time that you reset the counters.

FileAccessErrorView is a diagnostic tool for Windows that displays information about errors occur while programs running on your system try to open/read/write/delete a file. It displays the filename that the application tried to open/read/write/delete, the process id/name of the application, the error code (NTSTATUS code), the description of the error code, the number of times that this error occurred and the timestamp of this error.

Open Hardware Monitor tracks the temperature sensors, fan speeds, voltages, load and clock speeds of your computer.

FolderChangesView monitors the folder, disk drive, or even remote network share to see every file that is being modified, created, or deleted. Requires read permissions to the selected drive/folder.

Directory Monitor enables real-time monitoring for new files/folders or changes. The program can monitor unlimited directories and network shares, as well as filter results and execute a program/script at a given event. The program can log all changes and allows notifications via balloon messages or taskbar animation.

Supports relative folder locations. A pro version (see comparison) is available with additional features.

Restart on Crash is an monitoring tool that will watch the applications that you specify and automatically relaunch any program that hangs or crashes. You can add any number of applications to monitor, enable/disable them individually and edit the command line that will be used to restart an application.

Especially useful for unstable but critical programs.

NetConnectChoose lets you choose the default Internet connection for a given application. This is useful for security/speed (like using wired instead of wireless), to prevent overload, or save high bandwidth only for critical applications. Note that each connection must come from a different network adapter.

The program also displays extensive information about every active network/Internet connection, including network adapter name, MAC Address, Name Servers, MTU, Interface Speed, current incoming/outgoing data speed, number of received/sent packets, received/sent bytes, and more.

LastActivityView collects information from various sources on a running system and displays a log of actions made by the user and events that occurred on the machine. Events include running .exe files, any open/save dialog-boxes, opening file/folder from Explorer or other software, software installation, system shutdown/start, application or system crash, network connection/disconnection and more.

You can easily export this information into csv/tab-delimited/xml/html file or copy it to the clipboard and then paste into Excel or other software.

LoadedDllsView scans all running processes on your system and displays the list of all DLL files loaded by these processes. The program also shows the number of processes that load each DLL in the list. When selecting a file in the upper pane, the lower pane displays the list of all processes that use the selected file. You can also select one or more DLL files and then export the list into comma-delimited/tab-delimited/html/xml file.

NetworkCountersWatch displays system counters for every network interface on your system, which includes the numbers of incoming/outgoing bytes, incoming/outgoing and broadcast packets and more. You can also initialize all counters to zero at any time in order to watch the network counters for specific event. It also calculates and displays the current download and upload speed on your network interface.

Mem Reduct is a lightweight, real-time memory management application to monitor and clean system memory on your computer. The program uses undocumented internal system features (in the Native API) to clear system cache (system working set, working set, standby page lists, modified page lists) with variable result ~10-50%.

A 64-bit version is available within the archive.

TurnedOnTimesView analyses the Windows event log, detecting the time ranges when your computer was turned on. For those time frames, startup/shutdown time, duration, shutdown reason, type and process, as well as shutdown code are all displayed.

The program works on your local computer as well as from remote computer on your network if you have privileges to view the Windows event log remotely. Although primarily for system administrators, it can also help track down system issues and in testing.

WinLogOnView analyses the Windows security event log and detects the date/time that users logged on and logged off. For every log on/log off, the logon ID, user name, domain, computer, logon time, logoff time, duration and network address are all shown.

Primarily for system administrators, the program can also give you a look at your own machine usage. WinLogOnView also allows you to easily export the logon sessions information to tab-delimited/comma-delimited/html/xml file.

Desktop Info displays system information on your desktop in a similar way to some other desktop information tools. Unlike others, this application looks like wallpaper but stays resident in memory and continues to update the display in real time. Uses very little memory and nearly zero CPU. Perfect for quick identification and walk-by monitoring of production or test server farms. Everything is customisable including language.

USBLogView runs in the background and records the details of any USB device that is plugged or unplugged into your system. For every log line created by USBLogView, the following information is displayed: Event Type (Plug/Unplug), Event Time, Device Name, Description, Device Type, Drive Letter (for storage devices), Serial Number (Only for some types of devices), Vendor ID, Product ID, Vendor Name, Product Name and more.

You can easily select one or more log records and then export them into csv/tab-delimited/xml/html file.

AppCrashView displays the details of all application crashes occurred on your system. The crash information is extracted from the .wer files created by the Windows Error Reporting component of Windows.

HDDScan is a feature-rich disk diagnostics tool with a variety of low-level tools. It supports IDE/SATA/SCSI hard disk drives, RAID arrays, SSD drives, external USB/Firewire hard disks, flash cards and can scan the surface, view SMART attributes, adjust AAM, APM (Power Management), monitor temperature etc.

Note the program shouldn’t be run from a read-only device/media.

MyEventViewer is intended as an improved alternative to the standard Windows event viewer. The program allows the viewing of multiple event logs combined into one list, as well as the event description and data in the main window.  The program lets you easily select multiple event items and then save them to HTML/Text/XML file, or copy them to the clipboard (Ctrl+C) and paste them into Excel.

Vista+ users are encouraged to use the updated FullEventLogView utility.

SSD-Z provides a tabbed interface with diagnostics, analysis, and benchmark tools for your solid state drive. You can view S.M.A.R.T. status, partition layout, NAND, controller, and more.

Alternatively, SSD-Z Portable is also available.

BluetoothLogView monitors the activity of Bluetooth devices around you, and displays a log of Bluetooth devices on the main window. Every time that a new Bluetooth device arrives to your area and when the device leaves your area, a new log line is added with the following information: Device Name, Device Address, Event Time, Event Type ('Device Arrival' or 'Device Left'), Device Type, and the company that created the device.

BluetoothLogView also allows you to specify a description for every device (according to its MAC address) that will appear under the 'Description' column.

Created for Windows XP/SP2, Windows Vista, Windows 7 and Windows 8. "Other versions of Windows don't provide a build-in support for Bluetooth, and thus BluetoothLogView cannot work with them."

CPUMon Lite is a simple little gadget to monitor CPU performance from your desktop. It displays a real-time graph of CPU performance as well as current usage indicator. The display supports custom colors, alpha-blending, user defined update rates and more.

Additional features are available in the "Pro" version.

TinyResMeter is a small tool that you can configure to display real-time information of various system resources, including CPU, RAM, process etc. More details are available in a context menu that pops up when you right-click on each displayed field.

DeviceIOView allows you to watch the data transfer between a software or service and a device driver (DeviceIoControl calls). For each call to a device driver, the following information is displayed: Handle, Control Code, number of input bytes, number of output bytes, the name of the device handle, and all the input/output bytes, displayed as Hex dump.

ExecutedProgramsList displays a list of programs and batch files that you previously executed on your system. The program displays the .EXE file, creation/modify time of the .EXE file, and the current version information of the program (product name, product version, company name) if available.

Some programs will have a time listed for the last execution.

WinLister displays the list of opened windows on your system, provides data, and some optional controls. These include hide, show, close or set always-on-top mode, or save the windows list to text or HTML file. Window list information includes title, the handle of window, location, size, class name, process number, the name of the program that created the window, and more.

Great for managing a large number of windows or for UI/software developers.

Tell When Done watches a process running in another Window and notifies you when that process is complete. Since many tools are written without an alarm to signal completion, this program frees you to focus on other work.

SkypeLogView reads the log files created by Skype application, and displays the details of incoming/outgoing calls, chat messages, and file transfers made by the specified Skype account.

ProcessActivityView creates a summary of all files and folders that the selected process tries to access. For each file that the process access, the following information is displayed: Number of times that the file was opened and closed, number of read/write calls, total number of read/write bytes, the dll that made the last open-file call plus more...

FastResolver is a small utility that resolves multiple host names into IP addresses and vice versa. You can simply type the list of IP addresses or host name that you want to resolve, or alternatively, you can specify IP addresses range that you want to scan.

For local network, FastResolver also allows you to get the MAC address of all IP addresses that you scan. FastResolver is a multithreaded application, so it can resolve dozens of addresses within a few seconds.

ProcessCounter (formerly TaskCount) shows the number of running processes in real time, in the system tray.

Moo0 File Monitor monitors a host computer activity including processor history, disk activity, and a customizable view of file activities (create, write, rename, delete) on one or more drives. File activity is displayed live to demonstrate what applications are modifying the drive. The program can be used to track down programs that are slowing system performance by reading/writing too much from the hard drive or for config files and other changes.

HTML log file export available.

Note: Program exits by right-clicking system tray icon (thanks Jimmy).

EventLogSourcesView displays the list of all event log sources installed on your system. For every event log source, the following information is displayed: Event Source Name, Event Type, DLL/EXE Files containing the event message strings, Registry Modified Time, and version information taken from the DLL/EXE file (Product Name, Company, File Description, File Version).

You can select one or more items, and then export them to html/xml/csv/tab-delimited file by using the 'Save Selected Items' option (Ctrl+S) or copy the selected items to the clipboard (Ctrl+C) and then paste them to Excel or other application.

Process History reports on the processes run on your machine since it's launch.

SniffPass is a small password monitoring software that listens to your network, capturing the passwords that pass through your network adapter and display them instantly. SniffPass captures passwords using the 'Raw Socket' method. It is able to determine the following Protocols: POP3, IMAP4, SMTP, FTP, and HTTP (basic authentication passwords).

PTray is a performance optimization and monitor tool that will display CPU usage in percentage and available physical memory in the 16x16 icon in system tray area.

When you click the icon, it will minimize the physical usage for all running processes by calling SetProcessWorkingSetSize() API function on them. You can also indicate the priority for some processes in ini file. Once these processes run, its priority will be adjusted.

CurrProcess displays the list of all processes currently running on your system. For each process, you can view the list of all modules (DLL files) that the process loads into memory. for all processes and modules, additional useful information is also displayed: product name, version, company name, description of the file, the size of the file, and more.

Also provides the ability to change the priority of a process, kill a process, dump memory of process into a text file, create HTML report containing information about a process with the list of all modules that it loads into memory, save the list of all running processes into text or HTML file, and copy process or module information to the clipboard.

FATWalker is a simple, straightforward utility for analyzing FAT partitions on any media readable by your computer, showing deleted files, regular files, as well as detailed attributes for each file.

A program by the same developer is available for NTFS partitions.

NTFSWalker is a simple, straightforward utility for analyzing NTFS partitions on any media readable by your computer, showing deleted files, regular files, as well as file preview and detailed attributes for each file.

A program by the same developer is available for FAT partitions.

KeyCounter is a user activity monitor that keeps track of keystrokes and mouse movement. By counting the number of keystrokes you make every minute, it builds a history of your effort on a given machine. For example, if you start a new document in Word and type "Hello", that's six keypresses. Once for each of the letters, and one for pressing "shift" to make the "H" a capital.

You can then gauge user activity by seeing when activity begins and ends, and show when you were most busy. Times of inactivity are shown on a graph, such as when you were making coffee or gone for lunch.

The program will watch activity in any application, not merely characters typed, useful for activity that involves lots of false stops and starts; Keycounter lets you see how much work you've done, not just what you finished.

Note: note that the user has deleted mention of this program from his website; linking to archive.org.

Glint monitor shows system activity by making visible system performance counters in local or remote Windows PC. The utility displays up to 200 indicators, each showing data from a single system performance counter. Recent counter values can be also shown as graphs. The monitor also displays the most active processes in system in descending CPU activity order. System counter names and their last values are shown when hovering mouse cursor over the indicators.