Looking for monitoring software

Hey y'all. Looking to replace Commodo as it been giving me some headaches. I was speaking Callendar a bit who provided some suggestions as well. But I wonder what everyone else thinks based on the following criteria:

Software/File Protection:

-Alerts if any unauthorised file is being executed (aside from media files)
-Alerts if any unauthorised program is making file or registry changes
-Alerts if any program is attempting to access a network
-Integrated network real-time monitoring
-Can block/exempt executed files/programs
-Permanent file deletion
-File Monitoring; ability to have certain files watched

-Integrated installation monitor automatically detects install files and captures them
-Integrated installation removal tool
-Integrated installation option to make portable

Hardware Protection:

-Hardware/Service Change Detection
-Hardware Integrity Monitoring, detects faults/errors
-Integrated Latency Monitoring/Logging
-Latency Troubleshooting&Alerting if it goes above the average threshold

-Integrated I/O real-time monitoring/logging
-I/O Monitoring alerts if there is a large amount of writes or reads occurring

Operating Protection

-EventLog Alternative
-EventLog Monitor, reports issues as they happen and works to correct them
-EventLog Filtering, ability to remove logging of certain events

-BootTime Monitor/Logger
-BootTime Troubleshooting&Alerting if load times exceed average


Essentially this one program is an all-in-one proactive alerting system, then for cleanup there is CCleaner which is constantly improving. Process Hacker for seeing what's going on. And I know it is a lot to ask for, so if you know more than one application that can do this and be nice on resources it'd be appreciated. Thanks :)

Callender said:

I can't answer all your questions but here's what i know about. Anything that I personally use is marked with an asterisk.

Software/File Protection

-Alerts if any unauthorised file is being executed (aside from media files)

SecureAPlus Application Whitelisting * - need the No AV version. Checks any unsigned executable that attempts to run with the option to block. Plus a few more options. Also see: VirusTotal getting annoying cause of FPs

Note: I'm not using the current version.

VoodooShield *

Note: Pro version is cheap and much better than the free version. It does require a user to train the program and aslo reset the whitelist and retrain if a mistake is made in allowing something that should have been blocked.

Spy The Spy*

allows the user to specify directories to be monitored for the creation/ modification of executables.



-Alerts if any unauthorised program is making file or registry changes

MJRegWatcher* - real time registry protection.

-Alerts if any program is attempting to access a network

Well I use Threatfire for that. It's no longer available and there's no development or support but I can provide a download link if you want it.

-Integrated network real-time monitoring

I use Comodo CIS for that but also if you are using Windows Firewall take a look at:

Glasswire - Note: Only works with Windows Firewall



-Can block/exempt executed files/programs

See VoodooShield and SecureAplus (mentioned earlier)

Actually blocking specific files is tricky if they don't already exist on your machine and are legitimate. Maybe take a look at This Post.

Maybe take a look at: Smart Windows App Blocker



-Permanent file deletion

BlankAndSecure * - for folders or individual files.

SDelete* - to wipe free space and MFT free space (NTFS Drives only). I can help with command line usage.




-File Monitoring; ability to have certain files watched

Personally I only check for modified executables using Spy The Spy (mentioned earlier) and a few other files (like HOSTS file) using Threatfire.

-Integrated installation monitor automatically detects install files and captures them
-Integrated installation removal tool
-Integrated installation option to make portable

For that I was using Comodo Programs Manager as it does all of the above but it's no longer supported and it's stopped working on my machine. You could test it and see if it works for you. I've tried lots of replacements but none of them have been much good.

Hardware Protection:

-Hardware/Service Change Detection
-Hardware Integrity Monitoring, detects faults/errors
-Integrated Latency Monitoring/Logging
-Latency Troubleshooting&Alerting if it goes above the average threshold

No idea. Sorry.

-Integrated I/O real-time monitoring/logging
-I/O Monitoring alerts if there is a large amount of writes or reads occurring

Nothing that I've used has been any good.

Operating Protection

-EventLog Alternative

Windows Inspection Tool Set * - also great for monitoring on an as an when needed basis. Not for constant real-time monitoring as it would use too many resources.

-EventLog Monitor, reports issues as they happen and works to correct them
-EventLog Filtering, ability to remove logging of certain events

Don't know!

-BootTime Monitor/Logger

Currently i use Process Monitor if and when I get a slow boot issue. See:

How To Enable System Boot Time Logging using Process Monitor Tool*

-BootTime Troubleshooting&Alerting if load times exceed average

No Idea!

Thanks man, Recognised it was you right away in my email when it said
*SecureAPlus Application White .." . lol Much appreciated for your input. I'm actually happy to see that there are some areas you're unfamiliar with software wise that meet said conditions. I'll check out everything you mentioned here though and in the last thread. This is a bit I would like something that could do this, a bit I want to learn how these applications do it, and what applications are on the market presently, and what are their capabilities. So again much appreciated! I have a lot of work ahead of me.

That new interface is staying though eh, I am so out touch. I just use classic, is more customisable too. Only problems with that though are application support for the colours. Otherwise is good. I guess too now as displays become bigger you can space things out more. Is clean looking, easy to read. I just think the container and borders take up a lot of space natively. Most applications adopt their interface from the OS they're programmed to work on. That's something else to keep in mind. Need to make it easy, and if it is for home user basic can't be too clinical is hard to find a good median. And I think tabbed computing is the way to go like browsers are is the next step to go as I see everything being able to run off these interfaces. Even citrix and a lot business models all ready have similar set ups. It is hard though to adjust home users to this in a way that isn't disruptive to their workflow. I'd see full screen integration as the next step. I will erase what I just put and leave the details to the imagination. Is just for the amount of people, and time invested into the research and development of windows, osx, and what have you the end result is underwhelming. There is so much untapped potential, you just have to go to a forum like this sit on here for an hour and you just found a million cool ideas, new features to work on, etc. Microsoft should buy these forums around the web and use them as feed-back engines.


And thanks for other thread referral, you da the panda!