Can the index journal track which process created the journal entry
Can the index journal track which process created the journal entry
Can the index journal track which process created the journal entry? This would be very useful and save using resource monitor or procmon.
Re: Can the index journal track which process created the journal entry
Unfortunately, no.
Everything doesn't track this information.
nor does the NTFS USN Journal.
Everything doesn't track this information.
nor does the NTFS USN Journal.