Windows sysinternals

Chapter 4 Process Monitor 113
FIGURE 4-6 The Stack tab of the Event Properties dialog box.
On the Stack tab, you can do the following:
■ Click Save to save the stack trace as a comma-separated values (CSV) file.
■ Double-click a row in the stack trace to open the Module Properties dialog box. This
dialog box displays the name and path of the module in the stack trace, along with
the description, file version, and company name extracted from the module’s version
information resource.
■ Select a row and click Search to search online for more information about a symbol or
module name in the Location column. Procmon will initiate a search using your default
browser and search engine.
■ Click the Source button, which is enabled if the symbol information for the selected
stack frame includes source file information. The source file (if found at the expected
location) is displayed in a new window, with the identified line of source code selected.
Note Symbols need to be configured for Procmon to enable some of these features. You
configure them from the Procmon window (shown in Figure 4-1) by choosing Configure Symbols
from the Options menu. Refer to the “Configuring Symbols” section in Chapter 2 for details.
www.it-ebooks.info