Question

Using Winshark to Filter by process/PID

score 20 · Answer 1 · 2024-03-29T22:40:33.633000

20

Views

Using Winshark to Filter by process/PID

Published on 29 March 2024 at 22:40

score 60 · Answer 2 · 2024-03-20T18:22:41.313000

60

Views

Is it possible for a .NET process to be started without Event Counters?

Published on 20 March 2024 at 18:22

score 27 · Answer 3 · 2024-03-15T09:32:05.347000

27

Views

Why does Tracerpt does not require any formatting information in form of any PDB or TMF file, while Traceview and Tracefmt do?

Published on 15 March 2024 at 09:32

score 18 · Answer 4 · 2024-03-07T07:45:47.733000

18

Views

KarbsETW is only able to process creation events from powershell

Published on 07 March 2024 at 07:45

score 79 · Answer 5 · 2024-01-24T11:29:46.863000

79

Views

Undefined variable in generated header from ETW manifest file (Windows event tracing)

Published on 24 January 2024 at 11:29

score 23 · Answer 6 · 2024-01-15T07:12:44.853000

23

Views

What is PreviousCState in Context Switch Event and is this exposed by TraceProcessing?

Published on 15 January 2024 at 07:12

score 67 · Answer 7 · 2023-12-30T00:18:57.550000

67

Views

real time ETW consumer of file events EDD08927-9CC4-4E65-B970-C2560FB5C289 in VC++

Published on 30 December 2023 at 00:18

score 115 · Answer 8 · 2023-10-21T08:02:13.847000

115

Views

Track which browser app and url is currently active on Windows

Published on 21 October 2023 at 08:02

score 93 · Answer 9 · 2023-10-21T04:59:41.687000

93

Views

How can I trace Win32 window-messages on Windows 7?

Published on 21 October 2023 at 04:59

score 159 · Answer 10 · 2023-10-10T21:58:00.033000

159

Views

How investigate disk cache usage in Win32 application?

Published on 10 October 2023 at 21:58

score 110 · Answer 11 · 2023-09-03T17:54:47.480000

110

Views

How to write Windows ETW logs with golang?

Published on 03 September 2023 at 17:54

score 70 · Answer 12 · 2023-08-17T14:16:45.660000

70

Views

Do ETW calls take ownership of string pointers?

Published on 17 August 2023 at 14:16

score 50 · Answer 13 · 2023-05-11T14:58:48.100000

50

Views

How to trace ETW Events inside Parallel.ForEach in C#

Published on 11 May 2023 at 14:58

score 122 · Answer 14 · 2023-04-16T09:41:08.020000

122

Views

Missing Event in Microsoft-Windows-Kernel-Registry provider?

Published on 16 April 2023 at 09:41

score 74 · Answer 15 · 2023-03-24T03:06:04.083000

74

Views

How can I create a listener for ArcSoftEventProvider using Python?

Published on 24 March 2023 at 03:06

score 892 · Answer 16 · 2023-03-09T08:45:32.083000

892

Views

How to capture events from ETW provider "Microsoft-Windows-Security-Auditing" in real time session?

Published on 09 March 2023 at 08:45

score 337 · Answer 17 · 2023-03-06T14:59:27.943000

337

Views

Write HoloLens 2 application logs to Windows Device Portal

Published on 06 March 2023 at 14:59

score 171 · Answer 18 · 2023-01-09T09:53:13.940000

171

Views

What does logman query providers -pid really do?

Published on 09 January 2023 at 09:53

score 45 · Answer 19 · 2023-01-08T07:43:47.770000

45

Views

Receiving Multiplied Rundown events instead of once for the same ETW session

Published on 08 January 2023 at 07:43

score 74 · Answer 20 · 2023-01-03T11:11:53.180000

74

Views

Get method name from Image RVA

Published on 03 January 2023 at 11:11

List Question

Using Winshark to Filter by process/PID

Is it possible for a .NET process to be started without Event Counters?

Why does Tracerpt does not require any formatting information in form of any PDB or TMF file, while Traceview and Tracefmt do?

KarbsETW is only able to process creation events from powershell

Undefined variable in generated header from ETW manifest file (Windows event tracing)

What is PreviousCState in Context Switch Event and is this exposed by TraceProcessing?

real time ETW consumer of file events EDD08927-9CC4-4E65-B970-C2560FB5C289 in VC++

Track which browser app and url is currently active on Windows

How can I trace Win32 window-messages on Windows 7?

How investigate disk cache usage in Win32 application?

How to write Windows ETW logs with golang?

Do ETW calls take ownership of string pointers?

How to trace ETW Events inside Parallel.ForEach in C#

Missing Event in Microsoft-Windows-Kernel-Registry provider?

How can I create a listener for ArcSoftEventProvider using Python?

How to capture events from ETW provider "Microsoft-Windows-Security-Auditing" in real time session?

Write HoloLens 2 application logs to Windows Device Portal

What does logman query providers -pid really do?

Receiving Multiplied Rundown events instead of once for the same ETW session

Get method name from Image RVA

Trending Questions

Popular # Hahtags

Popular Questions