> If you simply want to receive a list of the context switches, even if only for your process, it must be running with full administrator privileges That's act

> If you simply want to receive a list of the context switches, even if only for your process, it must be running with full administrator privileges That's actually a reasonable security requirement, greatly narrowing attack surface. Note that ETW API was designed before CPU timing side channels like Spectre were a thing.