set PM=C:\tools\sysinternals\procmon.exe start %PM% /quiet /minimized /backingfile C:\temp\test.pml %PM% /waitforidle perl -le "system 'echo junk*'" %PM% /terminate #### $ strace -fqe execve perl -le "system 'echo junk*'" execve("/usr/local/bin/perl", ["perl", "-le", "system 'echo junk*'"], [/* 76 vars */]) = 0 [pid 26565] execve("/bin/sh", ["sh", "-c", "echo junk*"], [/* 76 vars */]) = 0 junk*