Users Guide

Interacting with the Cartridge for Guest Process Investigation 55
Process Information Data Sources
CIM Field: IDProcess
Parent Process ID
CIM Class: Win32_Process
CIM Field: ParentProcessId
Processor Utilization (%)
Processor Utilization requires a calculation involving data from several CIM Classes
and Fields. In addition, this calculation requires two samples of data and therefore is not
available until after a second data collection is performed.
CIM Classes: Win32_PerfRawData_PerfProc_Process, Win32_Processor
CIM Fields: Frequency_PerfTime, Timestamp_PerfTime, PercentProcessorTime
Total Processor Time
CIM Class: Win32_PerfRawData_PerfProc_Process
CIM Field: PercentProcessorTime
Memory Utilization
Memory Utilization requires a calculation involving data from several CIM Classes and
Fields.
CIM Classes: Win32_PerfRawData_PerfProc_Process, Win32_PhysicalMemory
CIM Fields: WorkingSet, Capacity
Virtual Memory Size
CIM Class: Win32_PerfRawData_PerfProc_Process
CIM Field: VirtualBytes
Working Set Size
CIM Class: Win32_PerfRawData_PerfProc_Process
CIM Field: WorkingSet