How to use Process Monitor for standard log and for bootlog