I enabled boot logging and generated thread profiling events every 100 milliseconds but I'm wondering if Process Monitor is able to log the events if I hold shift before pressing restart to enter into Windows Recovery Environment and then once I'm in the Recovery Environment, pressing continue...
Hey pseymour, I don't see the link with the zip for the procmon filter you created. I'm also having command prompts appear before entering certain windows environments (windows RE, windows installation, and a few during restoring an image from a backup with macrium reflect) and suspect that...