-
Notifications
You must be signed in to change notification settings - Fork 7
Home
R Fowkes edited this page Nov 29, 2025
·
13 revisions
- CPU
- Network Connections and Activity
- Memory: RAM, Heap, Virtual Memory
- File & Disk I/O
- Handles: Kernel, User, GDI
- Registry
- Thread Activity
- Anything and everything else!
- Native Code: C++ / C / Assembly
- Managed Code: C# / Common Language Runtime
- JavaScript: Chromium / Chakra
- Uses Event Tracing for Windows (ETW) and Microsoft's Windows Performance Analyzer (WPA)
- Pre-configured to expose usage of common resources over time.
- Reveals the names of the modules and functions responsible (symbolic call stacks).
- Handles all the tricky cases with a few simple commands.
- Highly Customizable: 1000s of resource types are traceable.
- Straightforward Documentation gets you up-to-speed.
- Windows 11+, 10, 8.x, 7: x86 / x64 / ARM
- PowerShell 2+, Core and Desktop (part of Windows)
- Windows Performance Recorder (WPR) (part of Windows 10+, or the Windows ADK)
- Adminstrator access
- Windows 11+, 10, 8.1: x64
- PowerShell 2+, Core and Desktop (part of Windows)
- Windows Performance Analyzer (WPA)
See: FAQ - Quick Start
I will claim credit for the functionality provided by my code.
I will accept responsibility for the resources it consumes.
• CPU Execution Sampling
• Wait Analysis
• Blocking/Waiting Code
• Deadlocks
• Deep Dive
• Native Code
• Managed Code
• JavaScript
• Speed Up Symbol Resolution
• Share Symbols with Others
• Troubleshoot Symbols Resolution
• Digging Deeper
• Missing Stackwalks
• ETW Providers
• Environment Variables
• Modify the Scripts
• CPU Monitor Counters
• More Performance Resources
