Library for ETW, ProcessTracker sample based on ETW
Explore Similar Repositories
ETWLocksmith:A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows registry.
etwbreaker:An IDA plugin to deal with Event Tracing for Windows (ETW)