FolderMon

Monitoring the various activity on the computer can lead to the detection of suspicious actions but unless the information is filtered you can end up with a huge pile of data to wade through.

FolderMon is a dedicated solution for keeping an eye out on all activity affecting specific locations (sub-folders included). No installation is required for the application but working with it is not intended for the average user as it is console-based.

As such, if you are used to rely more on the mouse cursor than the keyboard FolderMon can prove a bit more difficult to handle.

As soon as loaded in the command line console the program reveals its full functionality by listing the options available.

Taking into consideration that not all users might have the necessary knowledge to work with a console-based program, the developer provides an example for defining the parameters.

The syntax is simple as you have to type the name of the program followed by the supported flags and the location you want to be monitored.

FolderMon can be used to record file activity for the specified path. There is the possibility to define the triggers, which can be anything from changes to the name of a file or folder, modification of attributes or the size of an item.

Modifications of a file are tracked by monitoring the time of the last write action. Signs of tampering are detected based on the security descriptor of the item or changes of the creation date.

FolderMon can prove to be an asset under certain circumstances, but there are modern alternatives that can fill its shoes and provide a more comfortable user experience. Moreover, the application lacks the ability to keep tabs on multiple locations at the same time.