Stack trace in xperf for file access

Hi,

A process on my windows machine is deleting one file. Can I find out who is deleting the file using etl logs collected using xperf? Also can I get the stack trace of the delete operation ?

Thanks

I’d say you’re probably better of just using Process Monitor. Any specific reason you’re trying to do this through ETW?

-scott
OSR
@OSRDrivers