Filemon
From Altiris Wiki
Since FileMon is a program to run not to install, you cannot just capture the run of FileMon.
1) You must first unzip the files to a location while performing a global capture. Alternatively, you just drag the files to a location in the layer.
2) You have to put a shortcut to the exe in the run, runone, or startup area. This is most easily accomplished by opening the layer in advanced edit and dragging a shortcut that has the location of the file in the layer to the [Startup] or [CommonStartup] folders.
To have filemon start without prompting use a /q with your shortcut
Be sure to test your layer before sending it out! :)
