Home - microsoft/MSO-Scripts GitHub Wiki
- CPU
- Network Connections and Activity
- Memory: RAM, Heap, Virtual Memory
- File & Disk I/O
- Handles: Kernel, User, GDI
- Registry
- Thread Activity
- Anything and everything else!
- Native Code: C++ / C / Assembly
- Managed Code: C# / Common Language Runtime
- JavaScript: Chromium / Chakra
- Uses Event Tracing for Windows (ETW) and Microsoft's Windows Performance Analyzer (WPA)
- Pre-configured to expose usage of common resources over time.
- Reveals the names of the modules and functions responsible (symbolic call stacks).
- Handles all the tricky cases with a few simple commands.
- Highly Customizable: 1000s of resource types are traceable.
- Straightforward Documentation gets you up-to-speed.
- Windows 11+, 10, 8.x, 7: x86 / x64 / ARM
- PowerShell 2+, Core and Desktop (part of Windows)
- Windows Performance Recorder (WPR) (part of Windows 10+, or the Windows ADK)
- Adminstrator access
- Windows 11+, 10, 8.1: x64
- PowerShell 2+, Core and Desktop (part of Windows)
- Windows Performance Analyzer (WPA)
See: FAQ - Quick Start
I will claim credit for the functionality provided by my code.
I will accept responsibility for the resources it consumes.