Windows file monitoring and capturing tool