FileActivityWatch

FileActivityWatch is a Windows utility that monitors file and directory activity in real time. It displays detailed information about read, write, modify, and delete operations performed by system processes.

★★★★★

5.0(1 ratings)

• Real-time monitoring. Observes all file operations as they occur, providing immediate data on which processes are accessing which files and for what purpose.
• Process information. Identifies the exact process responsible for each file operation, including process ID, name, and full executable path.
• Operation types. Detects and categorizes different types of operations: read, write, create, delete, attribute changes, and security modifications.
• Advanced filtering. Allows setting custom filters to focus on specific files, folders, or processes, excluding irrelevant activity.
• Event logging. Captures and saves all file activity events to a log file for later analysis or forensic review.
• Details interface. Provides comprehensive information about each event: exact time, process, operation, file path, operation result, and relevant attributes.
• Remote monitoring. Capability to monitor file activity on remote systems via network connection, useful for system administrators.
• Configurable alerts. Option to set up notifications when specific file operations occur, based on user-defined criteria.
• Usage statistics. Generates statistical summaries about file activity, showing which processes and files have the most operations over a given period.
• Data export. Allows exporting monitoring results to multiple formats: plain text, CSV, HTML, or XML for external processing.
• Silent mode. Runs in the background with no visible interface, suitable for continuous monitoring without user interaction.
• Change tracking. Tracks specific modifications to files, including changes to content, attributes, or security permissions.

FileActivityWatch was created by Nir Sofer, an Israeli developer known for his numerous Windows utilities. The program was initially developed in 2015 and has received periodic updates since then. It is written primarily in C++ with some components in the C language. Nir Sofer maintains all his programs independently, releasing updates for compatibility with new Windows versions and fixing issues reported by users. The tool emerged as a response to the need to diagnose problems related to file locks and unauthorized access on Windows systems.

Alternatives to FileActivityWatch:

Secuditor Lite

Secuditor Lite is a free security diagnostic tool for Windows endpoints and network analysis.

Price: Free   Size: 28 MB   Version: 2.1.3   OS: Windows