List Question
20 TechQA 2024-03-29T22:40:33.633000Using Winshark to Filter by process/PID
20 views
Asked by tim11g
Is it possible for a .NET process to be started without Event Counters?
60 views
Asked by LA.27
Why does Tracerpt does not require any formatting information in form of any PDB or TMF file, while Traceview and Tracefmt do?
27 views
Asked by Order out of Chaos
KarbsETW is only able to process creation events from powershell
18 views
Asked by user846940
Undefined variable in generated header from ETW manifest file (Windows event tracing)
79 views
Asked by Toby Price
What is PreviousCState in Context Switch Event and is this exposed by TraceProcessing?
23 views
Asked by Alois Kraus
real time ETW consumer of file events EDD08927-9CC4-4E65-B970-C2560FB5C289 in VC++
67 views
Asked by user846940
Track which browser app and url is currently active on Windows
115 views
Asked by Maneet
How can I trace Win32 window-messages on Windows 7?
93 views
Asked by Dai
How investigate disk cache usage in Win32 application?
159 views
Asked by Zachary Turner
How to write Windows ETW logs with golang?
110 views
Asked by Shusheng Li
Do ETW calls take ownership of string pointers?
70 views
Asked by the_mandrill
How to trace ETW Events inside Parallel.ForEach in C#
50 views
Asked by Sks
Missing Event in Microsoft-Windows-Kernel-Registry provider?
122 views
Asked by CChris75325
How can I create a listener for ArcSoftEventProvider using Python?
74 views
Asked by Jason
Write HoloLens 2 application logs to Windows Device Portal
337 views
Asked by Finrod_Amandil
What does logman query providers -pid really do?
171 views
Asked by Kyoma
Receiving Multiplied Rundown events instead of once for the same ETW session
45 views
Asked by R.P
Get method name from Image RVA
74 views
Asked by Alois Kraus