title: List files accessed per-process with xperf?
body: <p>With xperf I can generate a trace and get a "flat" listing of all files read like so:</p>
  
  <p>xperf -on FileIO+FILE_IO+FILE_IO_INIT+FILENAME -stackwalk FileRead+FileWrite+FileDelete</p>
  
  <p>xperf -start FileIOSession -heap -PidNewProcess "C:\Python27\x86\python.exe scratchy.py" -WaitForNewProcess -BufferSize 1024 -MinBuffers 128 -MaxBuffers 512 -stackwalk HeapAlloc+HeapRealloc -f ./tempheap.etl</p>
  
  <p>xperf -stop FileIOSession -stop -d fileio.etl</p>
  
  <p>xperf -i fileio.etl -o fio_output.txt -a filename </p>
  
  <p>Unfortunately, the fio_output.txt file contains a list of every file imaginable that was accessed (from my web browser, IDE, etc).  More frustratingly, if I manually open xperfview and open the File I/O Summary Table, I can see my process (python.exe in this case) and the one file it reads (for test purposes) but can't seem to find a way to output that same data on the CLI which is what I need--an unattended, automated method of generating file access info.</p>