Abstract: Embodiments of the invention provide methods, systems, software and data structures for monitoring, analyzing, storing and/or collecting events on a monitored computer. In a set of embodiments, a monitoring process monitors one or more applications for events occurring in those application. The monitoring process, in some cases, runs in common a thread of execution with one or more of the applications. If the monitoring process detects an event, it might notify an event capture process, which might capture the event. In some embodiments, an analysis process might determine whether the event should be collected, and if so, maintain a representation of the event (perhaps in a specialized data structure). In other embodiments, a data management process is configured to store information about one or more events in an event cache, which might comprise a plurality of file streams and/or metafile streams, enabling efficient storage of information about events.

Abstract: The present invention provides tools and techniques for manipulating virtual partitions in a virtual engine environment without necessarily committing each partition manipulation by actually modifying on-disk system structures. A virtual engine, virtual partitions, virtual drives, and other structures in the virtual engine environment permit users to experiment with different partition manipulations in a safe and efficient manner. A batch manager manages a resulting list of partition manipulation operations, which may be optimized. The batch list may also be executed automatically by a conventional partition manipulation engine without requiring additional user input at the end of each list entry. The present invention also provides the ability to manipulate extended partitions automatically and provides support for remote partition manipulation through a two-part user interface architecture.