捕获被监视程序的所有行为 包括文件读写、注册表读写等 并且记录每个行为的精确相对时间 对分析程序很有帮助-Captured by the surveillance program including all acts of reading and writing of files, registry read and write and record the precise relative time of each behavior analysis program helpful