Process start events can be used as markers to indicate key events in the Windows startup process. For pure time measurements of reboot and logon timing, the only events that needs to be collected are 'process start' events. The only condition of WPT that lead me to use Process Monitor, is that Process Monitor has a powerful filtering capability that allows a reboot cycle trace to be as small as 8192 bytes (8 KB). WPT is also a 'must have' set of tools for tracing a reboot scenario, and many other facets of Windows performance. I know of at least one other toolkit that performs this Windows Performance Toolkit (WPT). The information collected from this startup trace can be used to determine how long the computer takes to get to various states, such as: One of the great capabilities of Process Monitor is its ability to capture a computer trace from very early in the computer startup process.

Process Monitor has evolved over the years from several different tools, into a single, 'must have' tool for a wide variety of troubleshooting scenarios.

Process monitor logging