4 ms·
OMG, Just use https://github.com/microsoft/krabsetw https://github.com/microsoft/krabsetw and be done with it...
by malkia 3y ago
OMG, Just use https://github.com/microsoft/krabsetw https://github.com/microsoft/krabsetw and be done with it...
- db48x 3y agoThat package dates from 2016, and this article was written in 2014. In those ancient days, you had no choice except to use the ETW api directly. Worse, the existence of a nice wrapper that smooths out the API doesn’t actually make the API itself any better. The existence of the wrapper is itself rather damning.