* .stop() should always call ControlTrace(STOP), and ignore any trace not found errors
* query_stats() should always call ControlTrace(QUERY),
and gracefully handle 'trace not found'
* tabs -> spaces
Co-authored-by: Matt Swann <3lemenopy@gmail.com>
* Improve wording for ETW interface
Rename nightmare.hpp to etw.hpp to reflect its function,
and remove opinions on the ETW API in the comments.
* Add vim files to .gitignore
* Port Readme.txt to markdown and improve its formatting
* Improve .gitignore wording
* Fix typo in krabs/README.md
* Rename O365.Security.Native.ETW to Microsoft.O365.Security.Native.ETW
- change all occurrences in solution and project files;
- rename the directory containing the project;
- rename the project files.
* Add support in C++/CLI for native ETW filtering
* Update nuspec
* Fix constructor comments
* Define a marshal_as template for List<T> to vector<T>
* Revert back to a helper method
* Add a generic list -> vector converter
Extract to a separate file
* CR feedback
* add native support for event filters via API
* not finished:
created one unittest to show usage of native filtering...
* adjust memory usage out of scope....
* file delete event in tests....
* resolving issue 1 in comments of pull request
* issue 2 in pull request comments
* comment 3 in pull request: indentation
* issue 4: identation of if
* excessive comment
* fixed typedef
* removing hungarian convention
* camelCase to snake_case
* snake_case
* fixing more comments in pull request
* uncommenting the first test
* applying comments of pull request
* supporting native event filtering alternated with predicates on other settings
* fix identation
* fixing style
* fixing tabs to spaces
* fix identation
* basing on last change requests except the different method for filterDesc composition which is reasked by me if we could ignore or not.
* fix to reference
* undo excessive change in styling. The file whole written in other style
* fixing indentation of for loop
* Disable strict compliance on tests project to work around a VS2017 compiler bug: https://developercommunity.visualstudio.com/content/problem/288560/cppunittestassert-doesnt-compile-with-permissive-i.html
* Disabling /permissive- for all build flavors
* Add ESRP delay signing key
* Add Microsoft prefix per MSFT requirements
* Sign.cmd is no longer needed
* Update assembly namespace to match nuget id
* Fix nuget file references
* Update expected public key
* Bump nuget version to 2.0.0
* - Make projects for Managed and Native example code.
- Create a 'tests' directory.
- Remove SampleCSharpKrabsExe as it is redundant with respect to the example code.
Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>
* - Add note about TYPEASSERT and NDEBUG compilation flags to README.md.
- Add /W4 /WX compiler flags to NativeExample project.
- vcxproj.filters updates based on VS magic.
Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>
John U