See currently and recently running VQL queries.
Report Currently Active queries.
See currently running VQL plugins.
Report Currently Active queries.
See plugin-specific information for certain VQL plugins.
Shows the current state of the ETW subsystem on Windows
Track current Glob operations
Track NTFS caches
Track current Sigma operations
Records Statistics about the Windows Event Log Watcher Subsystem.
Reference counting for open Zip files.
Report process tracker stats
Track SQLite handles used by the process.