Pavel Yosifovich is an independent developer whose open-source utilities focus on low-level Windows inspection and system administration. His compact portfolio centers on forensic-level process observation and registry manipulation: Process Monitor X exposes real-time file, network and registry activity down to thread level, letting troubleshooters filter gigabytes of events to locate rogue DLLs, blocked ports or stealthy autostarts, while Total Registry re-imagines Regedit with a dark-theme UI, undo/redo stack, bookmarked keys, and offline-hive support so analysts can edit Windows images without booting them. Both tools are frequently used by malware labs, driver debuggers, enterprise sysadmins and power users who need more granular control than built-in Windows monitors provide. Typical workflows include capturing a suspect installer’s footprint, comparing before-and-after snapshots to build whitelists, or scripting bulk security-hardening changes across registries extracted from VHD backups. Because the executables are portable and digitally signed, they also fit into WinPE recovery sticks and automated CI pipelines that validate system integrity after updates. The publisher’s entire catalog is available for free on get.nero.com, where downloads are delivered through trusted Windows package sources such as winget, always fetching the latest release and allowing silent batch installation of multiple applications.

Process Monitor X

Process Monitor X v2

Details
Total Registry

Total Registry - enhanced Registry editor/viewer

Details