My impression is that on open-source operating systems, some of DTrace's / eBPF's value lies in the ability to monitor kernel internals. If that's true, is DTr

My impression is that on open-source operating systems, some of DTrace's / eBPF's value lies in the ability to monitor kernel internals. If that's true, is DTrace as valuable on Windows, where computer owners don't have access to the OS's source code? For example, I'd love to use a tool like DTrace to monitor if/when/what telemetry data is being gathered and sent to Microsoft. But I imagine that's not possible for regular people like me.