Exercise 3: A 3 AM Slowdown With No One Watching — Possible Solution
====================================================================

WHY TASK MANAGER AND RESOURCE MONITOR ALONE AREN'T SUFFICIENT HERE
------------------------------
Per this chapter's own compare-table, both Task Manager and Resource
Monitor offer a "live snapshot" view - useful only for what's happening
at the exact moment someone is looking at the screen. Per this chapter,
"neither one is built to answer 'what was happening at 3 AM last night
when this machine locked up.'" If nobody is available to have either
tool open and watching at 3 AM, both tools have nothing to show
afterward - the moment has already passed with no record kept.

THE TOOL ACTUALLY BUILT FOR THIS SCENARIO
------------------------------
Per this chapter, "Performance Monitor (perfmon.exe) solves that with
Data Collector Sets - a defined group of performance counters logged to
disk continuously or on a schedule, reviewable afterward regardless of
whether anyone was watching when the problem actually occurred." Per
this chapter's own compare-table, Performance Monitor is specifically
described as best for "intermittent or overnight problems nobody was
watching happen live" - matching this exact scenario precisely.

HOW IT WOULD BE APPLIED HERE
------------------------------
Setting up a Data Collector Set logging relevant counters (CPU, memory,
disk activity) continuously, or scheduled to run overnight, would
capture what the machine was actually doing at 3 AM the following night,
producing a log that can be reviewed the next morning - regardless of
whether anyone was awake and watching a live tool at the time the
slowdown actually occurred.

WHY THE DISTINCTION MATTERS
------------------------------
The core issue isn't that Task Manager or Resource Monitor are the
wrong kind of tool in general - Chapter 1 and earlier in this chapter
both show them being genuinely useful for live investigation. The issue
is specifically the timing: a problem that occurs when nobody is
present to look live requires a tool that records data unattended, which
only Performance Monitor, among the tools covered so far, is built to
do.

WHY THIS WORKS AS AN ANSWER
------------------------------
It explains precisely why the "live snapshot" nature of Task Manager
and Resource Monitor makes them unsuitable for an unattended, overnight
problem, identifies Performance Monitor and Data Collector Sets as the
tool this chapter names for exactly this use case, and describes
concretely how it would be set up to capture the needed data.