mirror of
https://github.com/hakril/PythonForWindows
synced 2026-06-08 14:31:45 +00:00
hakril
49 lines
787 B
ReStructuredText
49 lines
787 B
ReStructuredText
ETW -- Event Tracing for Windows
|
|
================================
|
|
|
|
.. module:: windows.winobject.event_trace
|
|
|
|
The :class:`EtwManager` instance is accessible via :py:attr:`windows.system.etw
|
|
<windows.winobject.system.System.etw>`
|
|
|
|
.. note::
|
|
|
|
This code is the result of my research on ``ETW`` that lead to this presentation `ETW for the lazy reverser (FR) <https://www.rump.beer/2019/slides/etw_lazy_reverser.pdf>`_
|
|
|
|
|
|
.. note::
|
|
|
|
See sample :ref:`sample_etw`
|
|
|
|
|
|
EtwManager
|
|
""""""""""
|
|
|
|
|
|
.. autoclass:: EtwManager
|
|
:members:
|
|
|
|
|
|
Tracing Events
|
|
""""""""""""""
|
|
|
|
EtwTrace
|
|
''''''''
|
|
|
|
.. autoclass:: EtwTrace
|
|
:members:
|
|
|
|
|
|
EventTraceProperties
|
|
''''''''''''''''''''
|
|
|
|
.. autoclass:: EventTraceProperties
|
|
:members:
|
|
|
|
EventRecord
|
|
'''''''''''
|
|
|
|
.. autoclass:: EventRecord
|
|
:members:
|
|
|