details for adding TID field in procmon