Check out this webcast on TechNet Spotlight where Mark Russinovich explains some very advanced concepts of Windows troubleshooting with Process Monitor : http://www.microsoft.com/emea/spotlight/Mark_Russinovich_Advanced_Windows_Troubleshooting_with_Sysinternals_Process_Monitor.aspx