Mark Russinovich and Bryce Cogswell at www.sysinternals.com has released
freeware utility FileMon which is a device driver that can watch all file
system activity. Useful to Windows NT admin.
It has advanced filtering and search capabilities
that make it a powerful tool for exploring the way Windows works, seeing how
applications use the files and DLLs, or tracking down problems in system or
application configurations. Under Windows NT/2K Filemon can also be used to
monitor named pipe activity.
