List of processors

[itoleck]

• [x] processes - List process name/ID, parent ID, start/end time, duration, session, user information
• [x] tasks - List Scheduled Tasks events
• [x] gpos - List GPO processing information
• [x] winlogon - List provider, task, process ID, CPU#, thread of winlogon events
• [x] pnp - List PnP information
• [x] services - List service information
• [x] hardfaults - List process, path, avg IO time, size of hard faults
• [x] diskio - List Disk, Path, Type, latency of disk/Total Disk Stack/Only Que and filter driver, IO size and bandwidth
• [x] fileio - List FileIO, Path, duration in milliseconds, errorcodes and process information for each FileIO event
• [x] providerinfo - List the providers captured in the .etl trace, not including the kernel provider, 9e814aad-3204-11d2-9a82-006008a86939
• [x] minifilter - List of each minifilter event and duration in microseconds. Filter with the --ms: switch to remove events <= to the millisecond
• [x] minifiltersummary - List of minifilter drivers and total duration of each in milliseconds
• [x] cpusample - All CPU sample information
• [x] cpusamplenoidle - CPU sample information besides the Idle process, just actual work
• [x] bootphases - List of boot phases from boot trace based on process start/end times
• [ ] processzombies - TBD
• [ ] diskiosummary - List aggregates (Min, Max, Avg) for total disk IO values (IO Size, Duration, Bandwidth)
• [ ] memorysummary - TBD

[AloisKraus]

Are you aware of ETWAnalyzer? It does something similar https://github.com/Siemens-Healthineers/ETWAnalyzer like most of your queries but it extracts data into Json files which can then easily be queried.