iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To find the biggest current writers, measure process-level disk activity during the same time window: use Activity Monitor on macOS, Performance Monitor process counters on the Windows Server guidance, or iotop on Linux. Rank processes by their write rate or accumulated writes, depending on whether you are investigating a live spike or total activity during a test.
These measurements show I/O reported by the operating system. They do not provide a universal app-by-app total for NAND writes or lifetime SSD terabytes written (TBW). Caching, I/O reordering, filesystem behavior and block-level writes can make process figures differ from what the SSD actually commits.
Decide what you are trying to measure
“Which app writes the most?” can describe three different investigations. Choose one before opening a monitor, because each produces a different kind of answer.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchCurrent write rate
A live rate shows which process is generating the most write traffic now. This is useful when the SSD activity light stays busy, a backup is running, or the computer becomes slow during a particular task. A rate is normally expressed as bytes per second and can change from one refresh to the next.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Total writes during an observation window
An accumulated view answers a different question: how much data did each process report writing since monitoring began? Start the monitor, reproduce the workload, stop after a fixed interval, and compare the totals. A process that writes briefly at a high rate may rank above a process that writes steadily at a lower rate in a live view, while the reverse can be true over a long session.
Physical SSD writes and TBW
The bytes attributed to a process are not guaranteed to equal NAND bytes written inside the drive. The operating system can cache and reorder requests, filesystems can translate small changes into larger block operations, and the storage controller writes in blocks. Drive health tools may expose a device-wide lifetime counter, but the methods below do not split that lifetime value among applications.
Choose the monitor for your operating system
| Platform | Tool | What it attributes | View available | Important boundary |
|---|---|---|---|---|
| macOS | Activity Monitor | Disk reads and writes associated with running apps and processes | Live disk activity and amounts read or written | Shows logical operating-system activity, not a per-app NAND total |
| macOS | Xcode Instruments, File Activity template | Filesystem events and related process activity | Logical filesystem events; Disk Usage and Disk I/O Latency instruments provide physical-storage detail | Developer-oriented and more detailed than Activity Monitor |
| Windows | Performance Monitor process counters | Process instances through Process(*)IO Write Operations/sec |
Write operations per second for selected process instances | The cited Microsoft procedure is documented for supported Windows Server versions, not confirmed as identical on every Windows 10 or 11 edition |
| Linux | iotop |
Processes or threads generating I/O | Live bandwidth and an accumulated mode since the process or iotop started |
Process/kernel traffic can differ from traffic reaching the physical device |
| Linux | /proc/diskstats and /sys/block/<device>/stat |
Block-device activity | Cumulative device counters | These counters identify the device, not the application that initiated each write |
Check writers on macOS
Use Activity Monitor for a quick ranking
- Open Activity Monitor from the Mac’s Applications or Utilities area.
- Select the Disk view. Apple describes this view as tracking disk reads and writes and showing how much data is read or written.
- Watch the write-related values while the workload is running. For a fair ranking, observe every candidate process during the same interval rather than comparing one process during a busy period with another during an idle period.
- Record the process name and its write amount at the beginning and end of the interval. If the view presents a live rate, record several readings or the displayed total consistently; do not mix a rate from one process with a cumulative amount from another.
- Repeat the observation while reproducing the activity that concerns you, such as exporting a project, synchronizing a folder or running a virtual machine. The resulting list describes that workload on your Mac, not a universal ranking of applications.
Activity Monitor is the appropriate first pass when you need to identify an obvious, currently active writer without installing developer tools. It may show a helper, service or system process rather than the visible application that initiated the work; treat the displayed process as the layer actually observed.
Use Instruments when filesystem detail matters
Apple’s Xcode Instruments includes a File Activity template for deeper investigation. Its Filesystem Activity instrument records logical filesystem events. The template also includes Disk Usage and Disk I/O Latency instruments, which report physical-storage use and latency information.
- Open Xcode and launch Instruments.
- Choose the File Activity template.
- Start a recording before reproducing the write-heavy workload.
- Inspect the filesystem events to see which processes are issuing logical file operations.
- Use Disk Usage and Disk I/O Latency when you need to compare those logical events with activity at the storage layer.
- Stop the recording and compare events within the same capture window. Keep the logical and physical views separate in your notes; they answer related but different questions.
Instruments is useful when Activity Monitor identifies a broad service but you need to understand the files or filesystem events involved. Its physical-storage instruments still cannot retroactively assign every controller-level write to one application.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Check writers on Windows
Use the documented Performance Monitor counter
Microsoft’s Performance Monitor guidance identifies Process(*)IO Write Operations/sec as a process-specific disk-write counter. The wildcard represents process instances, allowing you to compare the write-operation rate reported for each instance while the workload runs.
- Open Performance Monitor.
- Add the process counter
Process(*)IO Write Operations/sec. - Select the process instances you want to observe, or include the available instances so that busy writers can be compared.
- Start monitoring before reproducing the workload and keep the observation interval consistent for every process.
- Identify the process instance with the highest sustained value, not merely the largest single refresh. Record the interval and workload so that a later run can be compared fairly.
This counter reports write operations per second, not a direct byte-for-byte NAND total. An operation can involve different amounts of data, so a high operation rate does not by itself prove the highest byte volume.
Recommended Free Tools
The Microsoft material cited for this method is scoped to supported Windows Server versions. Performance Monitor exists in other Windows editions, but the cited guidance should not be treated as confirmation that the same counter availability, labels or workflow are identical on every Windows 10 or Windows 11 installation.
Interpret system and kernel entries carefully
Storage work can be performed by kernel components or system processes after a user application requests it. Microsoft distinguishes kernel activity from user-mode process activity, so the process list may not expose the original application for every write. If a generic system or kernel label dominates, the monitor has identified where the operating system is handling the work, not necessarily the program that initiated it.
Check writers on Linux
Use iotop for process or thread activity
- Open a terminal and run
iotop. - Observe the process or thread rows while the write-heavy activity is occurring. The tool displays I/O bandwidth by process or thread.
- Sort or inspect the write-related column so the largest current writers are easy to compare.
- Use the tool’s process-only display and filters when you need to exclude threads or focus on selected processes.
- For a workload total, enable
iotop’s accumulated mode. It reports amounts since the process oriotopstarted, so begin the measurement immediately before reproducing the workload. - Stop after a defined interval and save the process names, elapsed time and accumulated values. Do not compare an accumulated value from one run with a live bandwidth value from another.
iotop can show traffic between processes or kernel threads and the kernel block-device subsystem, while the traffic from that subsystem to the underlying hardware can be different. That distinction explains why an apparently complete process ranking may not match a drive-level counter.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Use kernel statistics for device totals
Linux exposes device counters separately from process attribution. Read /proc/diskstats or the statistics file for a specific device under /sys/block/<device>/stat. These values are cumulative counters for the block device.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Identify the block device you want to measure.
- Capture the relevant counter from
/proc/diskstatsor/sys/block/<device>/statbefore the workload. - Run the workload for a known interval.
- Capture the same counter again.
- Subtract the first snapshot from the second to obtain activity during that interval, then compare that device-level result with the process-level values from
iotop.
Device counters can reset after a reboot, device reattachment or reinitialization, and they can eventually overflow. Record the system state and treat a decrease between snapshots as a possible reset rather than negative disk activity.
Build a fair ranking
A ranking is only meaningful when every process is measured under the same conditions. Use this procedure regardless of operating system:
- Define the workload. Start the capture immediately before the activity you want to explain, such as a build, media export, synchronization job or backup.
- Choose one metric. Use live bandwidth to find the current bottleneck, or use accumulated totals to find the largest contributor over the complete test. Keep rates and totals in separate notes.
- Keep the window fixed. A 60-second window and a two-hour window answer different questions. State the duration beside every recorded value.
- Capture all visible writers. Include background services and kernel or system entries. Omitting them can make the apparent top application misleading.
- Repeat a surprising result. A one-refresh spike may be transient. Re-run the same workload and look for a sustained pattern.
- Compare at the same layer. Compare process-to-process values within the same tool. Use device counters to validate overall storage activity, not to assign that activity to a particular app.
For example, if one process reports 600 MB over a 60-second accumulated interval, its reported average is 10 MB/s for that interval. That arithmetic describes the monitor’s process-level count; it is not a claim that the SSD’s NAND received exactly 600 MB.
Why process writes differ from physical SSD writes
Caching and I/O reordering
The iotop documentation distinguishes total bandwidth between processes or kernel threads and the kernel block-device subsystem from current traffic between that subsystem and the underlying hardware. Caches can delay a write, combine several requests or satisfy a request without immediately sending the same bytes to the device. Reordering can also change when traffic appears at each layer.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Filesystem and block behavior
Apple explains that physical disk reads and writes do not correlate directly with logical filesystem activity. Storage controllers write in blocks, frequently 4 KB in Apple’s technical example. A one-byte file change can therefore result in a block write. The 4 KB figure is an illustration of block-level behavior, not a measured average for all Macs or applications.
Kernel mediation
An app can request a write while a filesystem, cache manager or kernel worker performs the later device operation. A process monitor may therefore attribute the logical request to one process, show the later work under a generic system label, or divide the work across several kernel paths.
Counter lifetime and resets
Live displays usually describe the current observation, while accumulated displays begin when the process or monitor starts. Device statistics are longer-lived but can reset on reboot, reattachment, reinitialization or counter overflow. Always write down when measurement started and verify that counters increased normally.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Troubleshoot an unhelpful result
No obvious application is writing
Extend the observation window and reproduce the workload again. A short capture can miss periodic jobs, and a live rate can fall to zero between bursts. Check system or kernel entries rather than looking only for the name of a foreground application.
A generic system process is at the top
The monitoring layer may be seeing kernel-mediated work whose original user-mode caller is not exposed. Use the tool’s more detailed mode where available, such as Instruments’ filesystem events on macOS, and document the generic label instead of assigning the writes to an application without evidence.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Process totals do not match the device counter
This is expected when caching, request coalescing, reordering, filesystem block writes or kernel work intervene. Confirm that both measurements cover the same interval, then treat the process view as attribution and the device view as an overall storage check.
The ranking changes every few seconds
Switch from a live snapshot to an accumulated interval, or record several samples and compare sustained activity. A momentary spike identifies a burst, not necessarily the largest contributor over the full workload.
A Linux device counter is lower than the previous snapshot
Check for a reboot, device reattachment, reinitialization or counter overflow. A reset invalidates a simple subtraction across that boundary; start a new measurement window after the counter is stable.
What the result says about SSD wear
These tools can identify processes that generate substantial reported write activity during a chosen interval. They cannot derive an exact app-by-app lifetime TBW allocation from ordinary process counters or from the drive’s device-wide statistics.
Use the ranking to investigate sustained workloads, unnecessary temporary-file churn or a service that runs more often than expected. Do not convert a process total directly into NAND wear, and do not claim that one application caused a particular fraction of the SSD’s lifetime writes unless a measurement system specifically tracks that relationship at the device level.
Quick Recap
Measurement checklist
- Choose Activity Monitor or Instruments on macOS, the documented Performance Monitor process counter on supported Windows Server versions, or
iotopon Linux. - Decide whether you need live bandwidth or accumulated writes before starting.
- Use one defined observation window for every process you compare.
- Record process names, elapsed time and the metric’s units.
- Include system and kernel entries when they appear.
- Use Linux device statistics or macOS physical-storage instruments as a separate device-level view.
- Expect logical/process values and physical SSD writes to differ.
- Treat any conclusion as specific to the observed machine and workload, not as a universal ranking.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
