

Just press Record to begin monitoring and the results will appear in the window in a list or tree format. A capture only selected extensions option is available in the same window as the exclusions. You can use an exclusion on specific drives (or folders) for a more permanent solution. However, we found the drive selection a bit buggy and the options don’t stick.

If you want to disable a drive, go to the settings > “Drives to Monitor”. Only whole drives are monitored and all installed drives are selected for monitoring by default. There’s also some other system events like drive and media remove/add, network share/unshare, and server disconnect. These include attributes, create, delete, rename, update, and association. The program itself is portable and can monitor almost 20 different events. Although the Phrozen website no longer lists or even mentions its own tool, Windows Files Monitor still works.
