bucket/ProcessMonitor.yml

version: "4.01"
description: ProcessMonitor. Monitors file system, registry, process, thread and DLL activity in real-time.
homepage: https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
license:
  identifier: Freeware
  url: https://docs.microsoft.com/en-us/sysinternals/license-terms
url: https://download.sysinternals.com/files/ProcessMonitor.zip
hash: d4ed579fdc1957fde0124dd41efd8d72af0529254984bfa5a3864ecd8b539252
pre_install: |
  $sysint = 'HKCU:\SOFTWARE\Sysinternals'
  $fin = "$sysint\Process Monitor"
  New-Item $sysint, $fin -ErrorAction 'SilentlyContinue' | Out-Null
  Set-ItemProperty -Path $fin -Name 'EulaAccepted' -Value 1 -Type 'DWord' -Force | Out-Null
pre_uninstall: |
  if ($purge) {
      $sysInt = 'HKCU:\SOFTWARE\Sysinternals'
      Remove-Item "$sysInt\Process Monitor" -ErrorAction 'SilentlyContinue' -Force -Recurse
      if ((Get-ChildItem $sysInt).Count -eq 0) { Remove-Item $sysInt -ErrorAction 'SilentlyContinue' -Force -Recurse }
  }
architecture:
  64bit:
    bin:
    - Procmon64.exe
    - - Procmon64.exe
      - Procmon
    shortcuts:
    - - Procmon64.exe
      - SysInternals\ProcessMonitor
  32bit:
    bin: Procmon.exe
    shortcuts:
    - - Procmon.exe
      - SysInternals\ProcessMonitor
  arm64:
    bin:
    - Procmon64a.exe
    - - Procmon64a.exe
      - Procmon
    shortcuts:
    - - Procmon64a.exe
      - SysInternals\ProcessMonitor
checkver: Process Monitor\s+v([\d.]+)</h1
autoupdate:
  url: https://download.sysinternals.com/files/ProcessMonitor.zip