Users Guide
Interacting with the Cartridge for Guest Process Investigation 55
Process Information Data Sources
• CIM Field: IDProcess
Parent Process ID
• CIM Class: Win32_Process
• CIM Field: ParentProcessId
Processor Utilization (%)
Processor Utilization requires a calculation involving data from several CIM Classes
and Fields. In addition, this calculation requires two samples of data and therefore is not
available until after a second data collection is performed.
• CIM Classes: Win32_PerfRawData_PerfProc_Process, Win32_Processor
• CIM Fields: Frequency_PerfTime, Timestamp_PerfTime, PercentProcessorTime
Total Processor Time
• CIM Class: Win32_PerfRawData_PerfProc_Process
• CIM Field: PercentProcessorTime
Memory Utilization
Memory Utilization requires a calculation involving data from several CIM Classes and
Fields.
• CIM Classes: Win32_PerfRawData_PerfProc_Process, Win32_PhysicalMemory
• CIM Fields: WorkingSet, Capacity
Virtual Memory Size
• CIM Class: Win32_PerfRawData_PerfProc_Process
• CIM Field: VirtualBytes
Working Set Size
• CIM Class: Win32_PerfRawData_PerfProc_Process
• CIM Field: WorkingSet










