I am currently monitoring a system with perfmon and logging the following counters:
\Processor(_Total)\% Processor Time(overall usage)\Process(*)\% Processor Time(usage per process).
I can later see, that svchost.exe#785 (785 is an example here) was responsible for a CPU spike. Is there any way to see, which service that instance of svchost.exe had been busy with? Do I have to log anything in addition?
