1. At least one non-transitory computer-readable storage medium encoded with computer-executable instructions that, when executed by at least one processor, perform a method of analyzing a performance trace, the method comprising: comparing a plurality of behavior descriptors to the performance trace, each behavior descriptor from the plurality of behavior descriptors comprising a plurality of attributes, the plurality of attributes comprising recognition information characterizing a performance trace matching the behavior descriptor, the recognition information comprising at least one of a process name, a thread starting function, at least one function on a stack, a pair comprising a start indicator and an end indicator defining an operation of an application, and at least one file name in disk input/output (I/O); determining, based on the comparing, whether at least one behavior descriptor from the plurality of behavior descriptors matches at least one portion of the performance trace; and when it is determined that the at least one behavior descriptor matches the at least one portion of the performance trace, accessing information on behavior identified based on the matching.