Repository navigation
Home
Ricardo Esquivel edited this page Oct 5, 2026
·
14 revisions
- CPU
- Network Connections and Activity
- Memory: RAM, Heap, Virtual Memory
- File & Disk I/O
- Handles: Kernel, User, GDI
- Registry
- Thread Activity
- Anything and everything else!
- Native Code: C++ / C / Assembly
- Managed Code: C# / Common Language Runtime
- JavaScript: Chromium / Chakra
- Uses Event Tracing for Windows (ETW) and Microsoft's Windows Performance Analyzer (WPA)
- Pre-configured to expose usage of common resources over time.
- Reveals the names of the modules and functions responsible (symbolic call stacks).
- Handles all the tricky cases with a few simple commands.
- Highly Customizable: 1000s of resource types are traceable.
- Straightforward Documentation gets you up-to-speed.
- Windows 11+, 10, 8.x, 7: x86 / x64 / ARM
- PowerShell 2+, Core and Desktop (part of Windows)
- Windows Performance Recorder (WPR) (part of Windows 10+, or the Windows ADK)
- Adminstrator access
- Windows 11+, 10, 8.1: x64 / ARM64
- PowerShell 2+, Core and Desktop (part of Windows)
- Windows Performance Analyzer (WPA)
See: FAQ - Quick Start
I will claim credit for the functionality provided by my code.
I will accept responsibility for the resources it consumes.
• CPU Execution Sampling
• Wait Analysis
• Blocking/Waiting Code
• Deadlocks
• Deep Dive
• Native Code
• Managed Code
• JavaScript
• Speed Up Symbol Resolution
• Share Symbols with Others
• Troubleshoot Symbols Resolution
• Digging Deeper
• Missing Stackwalks
• ETW Providers
• Environment Variables
• Modify the Scripts
• CPU Monitor Counters
• More Performance Resources
