Status: 🟡 NOT STARTED
- Topic 2.1: What it does (real-time file/registry/process/network activity log)
- Topic 2.2: Why engineers use it (root-cause troubleshooting)
- Topic 2.3: Filtering techniques
- Topic 2.4: Safe exercise: watching registry activity during an app launch