specifically procmon will probably be what you want