There is an API monitor included in the appendix of the report. From the looks of it, it seems to be designed to hook into the API for the ETW sources and log t

There is an API monitor included in the appendix of the report. From the looks of it, it seems to be designed to hook into the API for the ETW sources and log the data that they record. But I can't tell what script language it is written in, so I cannot be entirely sure. Can someone have a closer look and tell me what this does exactly and how to run it? Seems interesting for those who want to get the complete picture of what Windows is recording.