Comment by obsidience

In Windows, use this tool to monitor all filesystem and registry activity of a given process:

https://learn.microsoft.com/en-us/sysinternals/downloads/pro...