Microsoft has a tool that will capture SCADS of O/S low-level data while the O/S is running. We're talking memory backed by terabyte SSD. Although I've used it on a few occasions, I can't remember the name. Help.
I've just spent the last 3 hours search for the name and have failed miserably.