Here's a short video of Process Spy v0.1 in action. The list of processes that we've seen events for are listed on the left (along with number of events we've seen from that process). Events are filtered to only file accesses that are within the current folder you are looking at or in any of the sub-folders (recursive). There's not a whole ton of interaction or animation, but even with just this info I can find some interesting things going on. For example, Discord seems to be looking at most of the .exe files that I have currently running. You'll also see that Process Spy detects it's own actions often. These are coming from the way we lookup icons for running processes. We have to ask Windows for the icon for a particular .exe and that gets logged as an event on that .exe.

Because of the short time it may be hard to get the program running properly on your computer (turns out getting the Open Procmon driver started reliably is harder than I thought, requires something more than just admin privileges). So this video acts as a standin for running the process yourself. Hopefully the program will be easier to run in the future