[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-6602":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":16,"subscribersCount":16,"size":16,"stars1d":16,"stars7d":17,"stars30d":18,"stars90d":16,"forks30d":16,"starsTrendScore":19,"compositeScore":20,"rankGlobal":10,"rankLanguage":10,"license":21,"archived":22,"fork":22,"defaultBranch":23,"hasWiki":24,"hasPages":22,"topics":25,"createdAt":10,"pushedAt":10,"updatedAt":26,"readmeContent":27,"aiSummary":28,"trendingCount":16,"starSnapshotCount":16,"syncStatus":19,"lastSyncTime":29,"discoverSource":30},6602,"ProcMon-for-Linux","microsoft\u002FProcMon-for-Linux","microsoft","A Linux version of the Procmon Sysinternals tool","",null,"C",4690,289,80,25,0,7,23,2,29.39,"MIT License",false,"main",true,[],"2026-06-12 02:01:27","# Process Monitor for Linux (Preview) [![Build Status](https:\u002F\u002Fdev.azure.com\u002Fsysinternals\u002FTools\u002F_apis\u002Fbuild\u002Fstatus\u002FSysinternals.ProcMon-for-Linux?repoName=Sysinternals%2FProcMon-for-Linux&branchName=main)](https:\u002F\u002Fdev.azure.com\u002Fsysinternals\u002FTools\u002F_build\u002Flatest?definitionId=342&repoName=Sysinternals%2FProcMon-for-Linux&branchName=main)\nProcess Monitor (Procmon) is a Linux reimagining of the classic Procmon tool from the Sysinternals suite of tools for Windows.  Procmon provides a convenient and efficient way for Linux developers to trace the syscall activity on the system.\n\n![Procmon in use](procmon.gif \"Procmon in use\")\n\n# Installation & Usage\n\n## Requirements\n\n* OS: Ubuntu 18.04 lts\n* `cmake` >= 3.14 (build-time only)\n* `libsqlite3-dev` >= 3.22 (build-time only)\n\n## Install Procmon\n\nPlease see installation instructions [here](INSTALL.md).\n\n## Build Procmon\nPlease see build instructions [here](BUILD.md).\n\n## Usage\n```txt\nUsage: procmon [OPTIONS]\n   OPTIONS\n      -h\u002F--help                Prints this help screen\n      -p\u002F--pids                Comma separated list of process IDs to monitor\n      -e\u002F--events              Comma separated list of system calls to monitor\n      -c\u002F--collect [FILEPATH]  Option to start Procmon in a headless mode\n      -f\u002F--file FILEPATH       Open a Procmon trace file\n      -l\u002F--log FILEPATH        Log debug traces to file\n```\n\n### Examples\n\nThe following traces all processes and syscalls on the system:\n\n```sh\nsudo procmon\n```\n\nThe following traces processes with process id 10 and 20:\n\n```sh\nsudo procmon -p 10,20\n```\n\nThe following traces process 20 only syscalls read, write and open at:\n\n```sh\nsudo procmon -p 20 -e read,write,openat\n```\n\nThe following traces process 35 and opens Procmon in headless mode to output all captured events to file `procmon.db`:\n\n```sh\nsudo procmon -p 35 -c procmon.db\n```\n\nThe following opens a Procmon `tracefile`, `procmon.db`, within the Procmon TUI:\n\n```sh\nsudo procmon -f procmon.db\n```\n\n# Feedback\n\n* Ask a question on Stack Overflow (tag with ProcmonForLinux)\n* Request a new feature on GitHub\n* Vote for popular feature requests\n* File a bug in GitHub Issues\n\n# Contributing\n\nIf you are interested in fixing issues and contributing directly to the code base, please see the [document How to Contribute](CONTRIBUTING.md), which covers the following:\n\n* How to build and run from the source\n* The development workflow, including debugging and running tests\n* Coding Guidelines\n* Submitting pull requests\n\nPlease see also our [Code of Conduct](CODE_OF_CONDUCT.md).\n\n# License\n\nCopyright (c) Microsoft Corporation. All rights reserved.\n\nLicensed under the MIT License.\n","Process Monitor for Linux 是一个用于监控Linux系统中进程系统调用活动的工具，是经典Windows Sysinternals套件中Procmon工具的Linux版本。它使用C语言编写，具备高效追踪指定进程ID或特定系统调用的能力，并支持无头模式下收集数据至文件。该工具特别适合Linux开发者在调试应用程序、性能分析以及安全审计等场景下使用，帮助他们更直观地理解程序与操作系统之间的交互情况。MIT许可证下的开源项目使得社区可以轻松参与贡献和改进。","2026-06-11 03:07:51","top_language"]