Process Monitor includes a number of dialogs that allow you to perform simple data mining on the events collected in a trace.
The Unique Values dialog, which you open using the corresponding menu entry in the Tools menu, lets you see the unique values for each of the different attribute values defined for events in a trace. For example, if you want quickly see all the paths referenced in the trace, choose Path in the selection entry.
Double-clicking on a displayed value or clicking on the Filter button adds an include filter for the currently selected value.
Open the Count Occurrences dialog from the Tools menu. It displays the unique values seen in a trace for the attribute type you specify along with the number of times in the trace an event contained the value.
This dialog summarizes the processes seen in the trace, including their process ID, image name, and command line.
The File Summary dialog lists each unique file system path present in the filtered trace, the amount of time spent performing I/O to the file, total number of events that referenced the path, and the count of individual operation types.
The Registry Summary dialog lists each unique Registry path present in the filtered trace, the amount of time spent performing I/O to the Registry path, total number of events that referenced the path, and the count of individual operation types.
Use the Stack Summary dialog to see individual instances of stack traces for each process, including the number of times the stack trace occurs and the total time spent in events that share the same trace.