Isticmaale Windows^(Windows) ahaan , waqti ka dib, waxaad dareemeysaa welwel ku saabsan xawaaraha mashiinkaaga. Waxay noqon kartaa sida ugu dhakhsaha badan ee uu nidaamkaagu uga jawaabo marka la soo galayo ama sida dhakhsaha ah ee uu u fuliyo hawlaha caadiga ah. Si aad u heshid saxda ah waxa ay samaynayaan barnaamijyada ku shaqeeya kombayutarkaga waxaad u baahantahay in aad ku rakibto qalabka la socodka waana halka uu ka isticmaalo Sysinternals Process Monitor^{(Sysinternals Process Monitor)} Tool.

Isticmaal habka kormeerka^{(Use Process Monitor)} si aad u cabbirto dib-u-bilawga & wakhtiyada soo galida

In kasta oo ay jiraan dhawr qalab oo la socodka Windows^{(monitoring tools for Windows)} , Kormeerka Habka^{(Process Monitor)} waxa uu bixiyaa baadhitaano horumarsan oo wax ka qabta xaalado kala duwan oo cilad-raadinta. Waxaa loo sameeyay si loola socdo nidaamka isla markaaba wajigiisa bilawga ah wuxuuna bixiyaa macluumaad faa'iido leh sida :

• Waqtiga loo baahan yahay nidaamka si loo soo bandhigo shaashadda logon
• Waqtiga loo baahan yahay isticmaaluhu si uu u galo aqoonsiga
• Waqtiga loo baahan yahay nidaamka si loo bilaabo Explorer
• Waqtiga uu u baahan yahay nidaamku inuu ku dejiyo Desktop-ka xaalad diyaar ah ( Desktop -ku wuxuu ku jiraa xaalad diyaarsan waxay muujineysaa in Windows ay ku bilaabatay inta badan adeegyadeeda iyo habraaceeda, isticmaaluhuna wuxuu bilaabi karaa inuu la falgalo codsiyada kala duwan isagoo aan sugin calaamad mashquul ah. )

Tilmaamaha Kormeerka Habraaca^{(Process Monitor)} waa sida soo socota:

• Soo bandhig sidoo kale duub nidaamka faylalka-waqtiga-dhabta ah, Diiwaangelinta^(Registry) , iyo habka/dhaqdhaqaaqa dunta
• Waxay duubi kartaa wakhtiga bootinta adoo ku socda qaabka waqtiga-dhabta ah
• Isticmaalka Kormeeraha Habka^{(Process Monitor)} , waxaad shaandheyn kartaa, raadin kartaa oo aad abuuri kartaa warbixinno ku saabsan nidaamka iyo hawlaha diiwaangelinta
• Qalabka cilad bixinta ee maamulayaasha Nidaamka^(System)
• ugaarsiga Malware

Sida loo bilaabo isticmaalka habka kormeerka

• Kormeerka^(Monitor) geedi socodka uma baahna rakibid. Waa inaad soo dejisaa kaydka zip. Marka aad soo saarto faylasha, waxaad socodsiin kartaa Procmon.exe si aad u bilowdo codsiga.
• Marka qalabka la ordo markii ugu horeysay, isticmaalaha waxaa la weydiin doonaa inuu aqbalo Heshiiska Shatiga Isticmaalaha Dhammaadka^{(End User License Agreement)} ( EULA ). Marka la aqbalo, mar dambe looma soo bandhigi doono isla profile-kii.
• Kaliya^(Simply) ku dheji aaladda barta shaqada adigoo midigta gujinaya ikhtiyaarka. Way sahlanaan lahayd in lagu bilaabo kormeeraha habka^(Process) hal mar oo keliya.

La socoshada Hawsha Interface-ka Isticmaalaha^{(Process Monitor User Interface)}

Isla marka uu furmo daaqada UI, qalabku waxa uu bilaabaa qabashada macluumaadka ku saabsan Diiwaangelinta^(Registry) , Faylasha^(Files) iyo Process/Thread Hawlaha Xargaha. UI-gu waxa uu ku xasuusinayaa xaashida faafinta oo leh macluumaad aad u badan. Waxaa jira filtarrada ay isticmaalayaashu codsan karaan si ay u kala saaraan xogta la ururiyey.

Waxaad arki doontaa liiska sii kordhaya ee hababka daaqada ugu weyn oo ay ku jiraan macluumaadka hoostooda dhowr madax oo faa'iido leh.

Sida loo duubo raadraaca wareegtada dib u soo kabashada iyadoo la adeegsanayo Kormeeraha ^{(Reboot Cycle)}Habka^{(Process Monitor)}

Raac tillaabooyinka hoos ku xusan si aad u raad raacdo wareegga dib u soo kabashada ee nidaamkaaga:

Ka hel faylka lagu magacaabo "ProcMon" oo ku yaal galka la furay oo guji.

Marka aad aragto interface-ka Habka Kormeeraha Filter dhagsii badhanka 'Dib-u-dejinta' si aad ugu celiso filtarrada qiyamka caadiga ah, ka dibna dhagsii badhanka 'OK'.

Hadda, dhagsii badhanka Qabashada^(Capture) ee menu-ka faylka si aad u joojiso raadraaca wakhtiga-dhabta ah ee hadda jira sida ku cad:

Fiiro gaar ah:^{(Note: )} Waxaa habboon in dhacdooyinka qaarkood laga sifeeyo raadadka aan looga baahnayn falanqaynta reboot iyo logon oo la yareeyo raadadka ilaa cabbir aad u yar. Hoos waxaa lagu xusay habka lagu sifeynayo dhacdooyinka aan la rabin.

On the icon ProcMon ka saar -door qaybaha soo socda ee dhacdooyinka:

1. Muuji Dhacdooyinka Shabakadda
2. Muuji Hawsha Nidaamka Faylka
3. Muuji Hawsha Diiwaanka

   

Hadda xidh nidaamka^(Process) kormeeraha oo dib u bilaw kombiyuutarka.

Haddii aad rabto inaad kaydiso booska diskka, ka dib gal marka nidaamkaagu bilaabo, Hadda, bilow Kormeeraha Habka^{(Process Monitor)} oo jooji. Badbaadi raadadka Tani waxay xaqiijin doontaa in xad-dhaaf ah oo meel disk ah aan la baabbi'in.

Marka, tani waxay ku saabsan tahay sida aan u duubi karno raadraaca annaga oo adeegsanayna Kormeeraha Habka^{(Process Monitor)} . Haddaba, aan aragno sida loo falanqeeyo raadkan.

Akhri^(Read) : Freeware si loo cabbiro Boot ama Wakhtiga Bilowga ee Windows^{(Freeware to measure Boot or Startup Time in Windows)} .

Sida loo falanqeeyo raad wareegtada dib-u-kicinta iyadoo la adeegsanayo Kormeeraha Habka^{(Process Monitor)}

• Marka nidaamku bilowdo, gal oo bilow Kormeeraha Habka Sysinternals'
• Hadda dib u deji filtarka sida kor ku xusan oo guji OK.
• Sanduuqa wada hadalka ayaa ku weydiin doona inaad kaydiso raadadka hadda jira. Ku keydi raad galka gal
• Hadda, raadkan bootka ah ayaa la heli doonaa oo xitaa lagu soo bandhigi doonaa Kormeeraha Habka^{(Process Monitor)} .
• Marka xigta, dhagsii "Qalabka" ka dibna "Process Tree".
• Halkan, dhagsii "Idle" shayga ugu horreeya ee tiirka bidixda oo ku hay qoraalka wakhtiga saacadda.
• Mar labaad^(Again) guji "Tools" ka dibna "Geed Geedi socodka". Ka raadi ikhtiyaarka "Logonui.exe" ee bidixda ugu bidix oo ku dhufo adiga oo xusaya wakhtiga saacadda sida hoos ku cad.

  

Farqiga u dhexeeya labadaba wakhtiga la xusay ee u dhexeeya wakhtiga shaqada iyo Logonui.exe waa farqiga u dhexeeya bilawga kumbuyuutarka iyo aqoonsiga logon.  ^{(The difference between both the noted time that is between Idle time and Logonui.exe time is the time gap between computer startup and logon credentials.  )}

Kor^(Above) ayaa ahayd sharraxaad ku saabsan sida waqtiga wareegga dib-u-kicinta loogu qiimeeyay Kormeeraha Habka^{(Process Monitor)} . Hadda, aynu fahanno muhiimada  Userinit.exe .

Userinit.exe waa habka^{(Userinit.exe)} la bilaabo haddii aqoonsiga isticmaalaha la xaqiijiyo, oo bilaaba silsiladda dhacdooyinka ee soo socota taasoo horseedaysa qolofka isticmaalaha bilawga, bilawga miiska, iyo calaamadaynta muhiimka ah "miistop diyaar u ah in la isticmaalo". Habka 'Userinit.exe' waa inuu ahaadaa mid aad u dhow laakiin hoos yimaada' habka hore loo xusay 'Logonui.exe. U fiirso wakhtiga saacada aad bilaabayso hawsha 'Userinit.exe' Farqiga u dhexeeya wakhtiga saacadda ee u dhexeeya bilawga 'Userinit.exe' iyo 'Procmon.exe' waa qiyaas ahaan wakhtiga guud ee isticmaalaha gaarka ah.

Way fududahay in la cabbiro waqtiyada kala duwan iyadoo la adeegsanayo kormeeraha habka .^(Process)

Kormeerka Habraaca waxa uu isticmaalaa kaliya 8KB ama 8192 bytes si uu ula socdo wakhtiga dib u soo kabashada. Sidoo kale, awooddeeda ^{( uses just 8KB or 8192 bytes to monitor the reboot time. Also, its)} shaandhaynta ee xoogga leh waxay u baahan tahay oo kaliya ""bilaabista habraaca" dhacdooyinka in la ururiyo. ^{( powerful filtering capability requires just “”process start” events to be collected. )}Markaa guud ahaan logon iyo dib-u-kicinta tirakoobka raadraaca ma saameeyaan qabashada raadraaca.^{(overall logon and reboot trace statistics are not affected by the trace capture.)}

Tani waa mid ka mid ah sifooyinka gaarka ah ee Kormeeraha Geedi-socodka kaas oo ka dhigaya mid aad uga fiican dhammaan agabyada kale ee loo qaabeeyey isla ujeeddada.^{(This is one of the special features of Process Monitor that makes it outstanding from all other tools designed for the same purpose.)}

 Tilmaamo kale^{(Other features)}

• Kormeerka Habraaca^{(Process Monitor)} wuxuu kuu oggolaanayaa inaad qabsato xogta iyadoo loo eegayo cabbirradaada. Sifadan lagama heli karo qalab kale.
• Xogta hore loo soo ururiyay ayaa adiga kula hadhaysa xataa kadib su'aalo cusub.
• Qabashada iyo falanqaynta xidhmooyinka dunta ee qalliin kasta, waxaad ogaan kartaa sababta asalka u ah
• Faahfaahinta habka waxa ku jira dariiqa sawirka, khadka taliska, isticmaalaha iyo aqoonsiga fadhiga
• Tiirarka^(Columns) waa la habeyn karaa - Waa la dhaqaajin karaa, la qarin karaa ama la tusi karaa
• Shaandheeyayaal ballaadhan goob kasta oo xog ah
• Geedi^(Process) socodka geeddi-socodku wuxuu muujinayaa xiriirka dhammaan hababka raadraaca.
• Suurtagalnimada in la joojiyo raadinta
• Wakhtiga bootinta^(Boot) ee dhammaan hawlgallada
• Qaab dhismeedka sare ee^(Advanced) goynta ayaa cabbiraya tobanaan milyan oo dhacdooyin la qabtay iyo gigabytes ee xogta log
• Kartida lagu kaydiyo xogta qaabka logu hooyo si loogu isticmaalo tusaalooyinka Kormeerka Geedi socodka ee kala duwan^{(Process Monitor)}

Guji Tools si aad uga dooratid tabyada kale ee faa'iidada leh sida faahfaahinta nidaamka , ^(System)Soo koobida Hawsha Habraaca^{(Process Activity Summary)} , Soo koobida Faylka^{(File Summary)} , Soo koobida Diiwaanka^{(Registry Summary)} iyo in ka badan.

Tixraac sawirada sawirada si aad u tixraacdo.

Waxa kale oo aad arki kartaa soo koobidda^(Process) hawsha.

Ciladda kaliya ee Kormeerka Geedi-socodka^{(Process Monitor)} waa in ay ku yara adagtahay isticmaaleha cusub in uu isticmaalo. Isticmaalayaasha badankood waxaa laga yaabaa inay ku adkaato isticmaalka aaladda waxaana laga yaabaa inay waqti galiyaan si ay u fahmaan sida ay u shaqeyso.

Khubarada IT-ga, maamulayaasha nidaamyada^(Systems) ama geeks tignoolajiyada ayaa ugu habboon inay ka faa'iidaystaan ​​​​tilmaanta Maareeyaha Geedi-socodka^{(Process Manager)} .

Si aad u soo dejiso Kormeerka Habka Booqo docs.microsoft.com . Faahfaahin dheeraad ah booqo TechNet .

Process Manager lets you measure computer reboot times and more

As a Windows user, at some point in time, you do feel concerned about thе speed of your machine. It could be about how quick does your systеm responds while logging in or how fast it runs to accomplish υsual tasks. Tо find exactly what the progrаms runnіng on your PC are doing you need to install a monitoring tool and this is where Sysinternals Process Monitor tool comes in use.

Use Process Monitor to measure reboot & logon times

Although there are several monitoring tools for Windows, Process Monitor offers advanced diagnostics and tackles various troubleshooting scenarios. It has been developed to monitor the system right from its starting phase and provides useful information such as:

• Time required by the system to display logon screen
• Time required by the user to enter the credentials
• Time required by the system to start the Explorer
• Time required by the system to set up the desktop in a ready state (Desktop is in a ready state indicates that Windows has started with the majority of its services and processes and the user can start interacting with various applications without waiting for a busy cursor sign)

The features of Process Monitor are as follows:

• Display as well as record real-time file system, Registry, and process/thread activity
• It can record booting time by running in real-time mode
• Using Process Monitor, you can filter, search and create reports about system and registry activities
• Troubleshooting tool for the System admins
• Malware hunting

How to start using Process Monitor

• Process Monitor does not require installation. You have to download a zip archive. Once you extract the files, you can run Procmon.exe to launch the application.
• When the tool is run for the first time, the user will be asked to accept the End User License Agreement (EULA). Once accepted it would never be displayed again for the same profile.
• Simply pin the tool to the taskbar with right click option. It would be easy to start the Process monitor with just one click.

Process Monitor User Interface

As soon as the UI window opens, the tool starts capturing information about Registry, Files and Process/Thread activity. The UI reminds you of a spreadsheet with a massive outlay of information. There are filters that users can apply to sort the collected data.

You will see the growing list of processes in the main window with information categorized under several useful headers.

How to record a Reboot Cycle trace with Process Monitor

Follow the below-mentioned steps to trace the reboot cycle of your system:

Locate the file named “ProcMon” from the unzipped folder and click.

Once you see the Process Monitor Filter’ interface click on the ‘Reset’ button to reset filters to default values, and then click the ‘OK’ button.

Now, click on the Capture button in the file menu to stop the current real-time trace as shown:

Note: It is advisable to filter some events from the trace that are not required in analyzing reboot and logon and reduce the trace to very small size. Mentioned below is the process to filter out the unwanted events.

On the ProcMon icon bar de-select the following categories of events:

1. Show Network Events
2. Show File System Activity
3. Show Registry Activity

   

Now close the Process monitor and restart the computer.

If you wish to save the disk space, then log on once your system initiates, Now, start the Process Monitor and stop it. Save the trace. This will ensure that an excessive amount of disk space is not consumed.

So, this was about how we can record the trace using Process Monitor. Now, let us see how to analyze this trace.

Read: Freeware to measure Boot or Startup Time in Windows.

How to analyze the reboot cycle trace with Process Monitor

• Once the system starts, logon and start the Sysinternals’ Process Monitor.
• Now reset the filter as mentioned above and click Ok.
• A dialog box will ask you to save the current trace. Save the trace in a folder.
• Now, this boot trace will be available and even displayed in Process Monitor.
• Next, click on “Tools” and then on “Process Tree”.
• Here, click on “Idle” the first item in the leftmost column and keep the note of the time on the clock.
• Again click on “Tools” and then on “Process Tree”. Look for the option “Logonui.exe” in the leftmost and click on it while noting the clock time as shown below.

  

The difference between both the noted time that is between Idle time and Logonui.exe time is the time gap between computer startup and logon credentials.  

Above was an explanation of how reboot cycle time is evaluated with Process Monitor. Now, let’s understand the significance of Userinit.exe.

‘Userinit.exe is the process that is launched if the user’s credentials are verified, and initiates the subsequent chain of events leading to the user’s shell starting, desktop starting, and the important marker “desktop ready to use”. The ‘Userinit.exe’ process should be relatively close but under’ the previously noted process ‘Logonui.exe. Note the clock time for starting of the ‘Userinit.exe’ process. The difference in clock time between starting of ‘Userinit.exe’ and ‘Procmon.exe’ is roughly that particular user’s overall logon time.

It is quite easy to measure respective times using Process monitor.

Process Monitor uses just 8KB or 8192 bytes to monitor the reboot time. Also, its powerful filtering capability requires just “”process start” events to be collected. Thus overall logon and reboot trace statistics are not affected by the trace capture.

This is one of the special features of Process Monitor that makes it outstanding from all other tools designed for the same purpose.

 Other features

• Process Monitor allows you to capture data according to your parameters. This feature is not available with other tools.
• Previously collected data remains with you even after new queries.
• By capturing and analyzing thread stacks for each operation, you can detect the root cause
• Process details include image path, command line, user and session ID
• Columns are configurable – They can be moved, hidden or shown
• Extensive filters for any data field
• Process tree shows the relationship of all processes in a trace.
• Possibility to cancel search
• Boot time logging for all operations
• Advanced logging architecture scales to tens of millions of captured events and gigabytes of log data
• Ability to save native log format data for use in different Process Monitor instances

Click on Tools to choose from the other set of useful tabs like System details, Process Activity Summary, File Summary, Registry Summary and more.

Refer the screenshots for reference.

You can also see the Process activity summary.

The only drawback of Process Monitor is that it is a bit complicated for the novice user to use. Most users may find it challenging to use the tool and may have to invest time in understanding how it works.

IT experts, Systems admins or technology geeks are best suited to utilize the features of Process Manager.

To download Process Monitor visit docs.microsoft.com. For more details visit TechNet.

Related posts

• RAMMap waa utility falanqaynta isticmaalka xusuusta ka Sysinternals

• Xakamaynta xusuusta Jireed ee faylasha Shilalka ee Windows 10

• Sida loo isticmaalo SysInternals Process Explorer Tool for Windows 10

• Kormeeraha nidaamka Sysinternals Sysmon ee Windows

• Kaabta, Soo Celinta, Ku dhaqaaq Ciyaaraha Steam Maareeyaha Maktabadda Steam

• Maareeyaha Aaladu waa madhan oo aan waxba ka muujinayn Windows 11/10

• Maareeyaha Hawsha ayaa ku burburay bilawga gudaha Windows 11/10

• Sida loo hubiyo, loo yareeyo ama loo kordhiyo isticmaalka CPU gudaha Windows 11/10

• Maamul walxaha bilawga ah ee Windows adoo isticmaalaya Maamulaha Bilowga HiBit

• KMyMoney: Maareeyaha Maaliyadda Shakhsiyeed software ee Windows PC

• Sida loo joojiyo habab badan oo Chrome ka ah inay ku dhex socdaan Maareeyaha Hawsha

• Software-ka ugu fiican ee maamulaha kiliboodhka bilaashka ah ee Windows 11/10

• Talooyinka iyo tabaha Maareeyaha Hawsha Windows waxaa laga yaabaa inaadan ka warqabin

• Manager Desktop Edition waa software xisaabaadka bilaashka ah ee ganacsiyada yar yar

• GameSave Manager: Kaabta, kaydi oo soo celi horumarka ciyaarta

• Maareeyaha Hawsha taskeng.exe wuxuu si aan kala sooc lahayn ugu furmay Windows 11/10

• Sida loo joojiyo barnaamijyada bilowga ee Windows 11/10

• Hagaaji dhacdada ID7001 Maareeyaha Xakamaynta Adeegga Windows 11/10

• Sida loo isticmaalo Maareeyaha Hawsha Firefox

• Software-ka ugu Fiican ee Maamulaha Qaybinta Bilaashka ah ee Windows 11/10