sysmon for windows would do a good job