Tag Archives: process tree

Process Tree from an Xperf Trace

I was looking at an xperf (ETW) trace recently and needed to know who had started a particular process. The parent process ID was stored in the trace so I could find its parent, and its parent’s parent, and so … Continue reading

Posted in xperf | Tagged , , , , | 11 Comments