I tried Sysinternals - Process Monitor, but there is no way to dynamically attach filters for child processes