MultiMon is a powerful tool which monitors and displays a detailed report on various PC actions.

The program can list files as they're created, accessed, written or deleted. A Registry tab details Registry activity. A System tab lists thread creations and deletions, and there are monitors for keypresses, clipboard and user actions.

MultiMon is easier to set up and use than many similar programs. Check the boxes for the monitors you'd like to use, select one of the viewing tabs and click Start to begin monitoring, End when you're done.

Detected actions are displayed in a table, as they happen, and these aren't always as beginner-friendly. The File System tab told us about a file function titled "IRP_MJ_ACQUIRE_FOR_SECTION_SYNCHRONIZATION", for instance, with a type of "MiniFilter", along with its major and minor function numbers, operation and IRP flags.

Still, MultiMon also told us that the action was being taken by Avira.ServiceH, from the file C:\Program Files (x86)\Avira\Launcher\System.Data.SQLite.dll, with the process ID 3044, and that it had succeeded-- more than enough information to be useful. And the other monitors delivered clearer and less developer-oriented details, which even we could understand.

As usual with these tools, the finished report can list tens, maybe hundreds of thousands of actions. Fortunately, simple "include" and "exclude" filters help locate the details you need.

Please note, the free Home Edition is licenced for home use only, and has some restrictions. We noticed that the Preferences dialog is disabled, for instance, and there may be other issues-- the site didn't make it clear.

What's new in v3.0?

Support for Windows 10

MultiMon now supports Windows 10 as well as latest Windows server operating systems.

Functionality removed that was not sustainable

Several of the monitoring features of MultiMon that were only available on the 32-bit version of Microsoft Windows have been removed. The reason is that the techniques used to achieve them are not sustainable in the future because of Microsoft security features such as patch protection. If you wish to make use of a DeviceIoControl or File API monitor, it's suggested that you run MultiMon v2.50 on a 32-bit system.

Include and Exclude filters

MultiMon now offers non-destructive include and exclude filters on all monitoring views. This allows you to quickly find matching information.

Bugs fixed

Several other (non-fatal) bugs have been fixed.