xperf -start kerneletwlogger -on dispatcher+latency+networktrace+spinlock+interrupt_steer+disk_io+disk_io_init+drivers+footprint+ipi+flt_io_init+flt_io+flt_fastio+flt_io_failure+ke_clock  -stackwalk profile+cswitch+readythread+threadcreate -buffersize 1024 -minbuffers 160 -maxbuffers 160 -f <somepath\kernel.etl> -start useretwlogger -on Microsoft-Windows-Win32k:0xfdffffffefffffff+Multi-MAIN+Multi-FrameRate+Multi-Input+Multi-Worker+Microsoft-Windows-Kernel-Memory:0xE0 -f <somepath\user.etl>