In this talk we will be looking at some practical ways to use the Windows Performance Toolkit. Not many people know about this little gem. It's kind of like procmon on steroids. This talk is for security researchers, malware analysts, system administrators, and the rest of us who want to know more about what goes on under the hood.