> without having to explicitly stop/restart running processes. With DTrace you not only don't have to restart processes, but you don't have to recompile them.

> without having to explicitly stop/restart running processes. With DTrace you not only don't have to restart processes, but you don't have to recompile them. ETW is glorified logging. Logging is useful, but dynamic tracing is transformatively different. I can't recompile the Windows kernel to add missing ETW probes, but I can use DTrace to probe it just fine.