Trying to match Procmon entries to a packet capture can seem frustrating at first. There are two things that stand out to me in the Procmon ...