Question 1

What is SRUM and what does it record on Windows 8/8.1 systems?

Accepted Answer

SRUM tracks process and network statistics over time, storing process details, user ownership, CPU cycle usage, and network data sent or received by processes. It also includes Windows Push Notification details and network connectivity timing.

Question 2

Which kinds of information are not collected by SRUM?

Accepted Answer

SRUM does not record command-line arguments, DLL information, resource handles, thread information, or file access. It also does not capture network endpoint details such as IP addresses, computer names, protocols, or port numbers.

Question 3

How often does SRUM update its database, and what can force an immediate update?

Accepted Answer

The default database update period is one hour, with typical writes at 30 minutes after each hour on Windows 8. A shutdown triggers an immediate update of the SRUM database.