Difference between duration and relative duration in procmon

Question

In the following image, as we can see there are 2 time which are duration and relative duration. I am not able to find out the basic difference between them. Why is duration of process create is 0.000000? Can i know the how much time it took to start the process in procmon or other software. screenshot of procmon process creation duration

Answer 1

You can find those information within the procmon help file:

• Relative Time: The time of the operation relative to Process Monitor's start time or the last time that the Process Monitor display was cleared.
• Duration: The duration of an operation that has completed.