Skip to content

Instantly share code, notes, and snippets.

@huyen-nguyen
Forked from mgeeky/Procmon_operationst.txt
Last active January 3, 2019 23:18
Show Gist options
  • Save huyen-nguyen/cccd24f332c7e2bc32750dbc04b10259 to your computer and use it in GitHub Desktop.
Save huyen-nguyen/cccd24f332c7e2bc32750dbc04b10259 to your computer and use it in GitHub Desktop.
PROCMON Operations list
CloseFile
CreateFile
CreateFileMapping
DeviceIoControl
FileSystemControl
FlushBuffersFile
Load Image
LockFile
NotifyChangeDirectory
Process Create
Process Exit
Process Profiling
Process Start
QueryAllInformationFile
QueryAttributeInformationVolume
QueryAttributeTagFile
QueryBasicInformationFile
QueryDeviceRelations
QueryDirectory
QueryEAFile
QueryFileInternalInformationFile
QueryFullSizeInformationVolume
QueryInformationVolume
QueryNameInformationFile
QueryNetworkOpenInformationFile
QueryNormalizedNameInformationFile
QueryObjectIdInformationVolume
QueryOpen
QueryPositionInformationFile
QueryRemoteProtocolInformation
QuerySecurityFile
QuerySizeInformationVolume
QueryStandardInformationFile
QueryStreamInformationFile
ReadFile
RegCloseKey
RegCreateKey
RegDeleteKey
RegDeleteValue
RegEnumKey
RegEnumValue
RegLoadKey
RegOpenKey
RegQueryKey
RegQueryKeySecurity
RegQueryMultipleValueKey
RegQueryValue
RegSetInfoKey
RegSetKeySecurity
RegSetValue
SetAllocationInformationFile
SetBasicInformationFile
SetDispositionInformationFile
SetEndOfFileInformationFile
SetPositionInformationFile
SetRenameInformationFile
SetSecurityFile
TCP Accept
TCP Connect
TCP Disconnect
TCP Receive
TCP Reconnect
TCP Retransmit
TCP Send
TCP TCPCopy
Thread Create
Thread Exit
UDP Receive
UDP Send
UnlockFileSingle
WriteFile
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment