Metallica/Pieter Arntz published a two-part series on Process Explorer. (Process Explorer is part of Windows Sysinternals, originally developed as part of Winternals and acquired by Microsoft ten years ago. As most everyone knows, Mark Russinovich joined Microsoft at that time.)
Process Explorer: an introduction (https://blog.malwarebytes.org/101/2016/05/process-explorer-an-introduction/)
Process Explorer: part 2 (https://blog.malwarebytes.org/101/2016/05/process-explorer-part-2/)