XBootMgr.exe

Windows Performance Toolkit binary used to start performance traces.

Execute

Executes code as part of post-trace automation flow.

xbootmgr.exe -trace "{boot|hibernate|standby|shutdown|rebootCycle}" -callBack {PATH:.exe}

Executes an executable after the trace is complete using the callBack parameter. — MITRE: T1202 — Privileges: Administrator

Executes code as part of pre-trace automation or staging.

xbootmgr.exe -trace "{boot|hibernate|standby|shutdown|rebootCycle}" -preTraceCmd {PATH:.exe}

Executes an executable before each trace run using the preTraceCmd parameter. — MITRE: T1202 — Privileges: Administrator