The Process Tree

The Process Tree

The Process Tree menu entry in the Tools menu opens the Process Tree dialog, which displays all of the processes referenced in the loaded trace in a hierarchy that reflects their parent-child relationships. Processes with the same parent are sorted according to their start time. Processes that are aligned along the left side of the window have parent processes that did not execute any event in the trace.

When you select a process in the tree a subset of the data Process Monitor has obtained about the process, such as its image path, user account, and start time, shows in the bottom of the dialog. To view more information about a process you can click on the Go To Event button, which results in Process Monitor locating and selecting the first visible item in the trace executed by the process. Note that filters can prevent this operation from succeeding by excluding from the display all of the specified process' events.