admin/microsoft-krabsetw
1
0
Fork 0
mirror of https://github.com/microsoft/krabsetw synced 2026-06-06 16:14:32 +00:00
Code Issues Packages Projects Releases Wiki Activity
21 Commits 6 Branches 0 Tags
c5534af0eb8d4ea24e493de5dafec28c650ca80b
Commit Graph

21 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Zac Brown c5534af0eb Updates to nuspec files and managed build definition. 
Signed-off-by: Zac Brown <zbrown@microsoft.com>
 2017-03-08 10:51:19 -08:00
Kyle Reed 14f78f54c2 Support fixed-length strings in collection_view (#16) 
* collection_view adapter null_string was expecting null terminated strings
determine the actual string length like we're doing for std::string and std::wstring parsing

Signed-off-by: Kyle Reed <kallanreed@outlook.com>

* Rename basic_string -> generic_string to prevent confusion

Signed-off-by: Kyle Reed <kallanreed@outlook.com>
 2017-03-07 15:09:24 -08:00
Zac Brown (ODSP SECURITY) 956e2549b9 Add instructions for checking the signing key on the NuGet binaries. 
Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>
 2017-03-03 13:45:02 -08:00
Zac Brown (ODSP SECURITY) ee5c1030cb New NuGet for string length fix for certain ETW providers. 
Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>
 2017-03-03 13:39:28 -08:00
Zac Brown (ODSP SECURITY) 18d96c1277 Update nuspec for 1.0.1. 
Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>
 2017-03-03 13:32:59 -08:00
Zac Brown af59f4363a Merge pull request #14 from kallanreed/master 2017-03-01 16:09:03 -08:00
Kyle Reed fd9dd3cc5a typo 2017-03-01 16:04:38 -08:00
Kyle Reed cd84021311 Fix bug where null terminated strings contained terminator 2017-03-01 16:02:28 -08:00
Zac Brown fbe5b57893 Merge pull request #12 from kallanreed/master 2017-02-24 16:09:57 -08:00
Kyle Reed cc4f558b8a Explicitly set the length of ansi and unicode strings on creation 
Signed-off-by: Kyle Reed <kallanreed@outlook.com>
 2017-02-24 16:01:21 -08:00
Zac Brown 5b56b4fb6f Force usage of TDH to get property size when arrayvalue is being processed. (#10) 
* Create a debug version of the Lobsters nuspec.

* Create UsingMessageAnalyzerToFindETWSources.md

* Add guide for using Message Analyzer

Signed-off-by: Zac Brown <zac@zacbrown.io>

* Update links to images.

Signed-off-by: Zac Brown <zac@zacbrown.io>

* Add link to Message Analyzer howto in README.

* Force usage of TDH to get property size of array types. Should this prove to be a performance penalty in the longterm, we will revisit optimizing for heuristic sizing.

Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>

* More general solution for handling when property Flags are set on EVENT_PROPERTY_INFO.

1) If flags are not set, try to get the length from the property 'length' field. Otherwise, try the heuristic.
2) if we couldn't get a length, fall back to calling TDH.

Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>
 2017-01-31 12:07:40 -08:00
Zac Brown 24506375e3 Add link to ETW Primer on README.md. 2016-12-29 12:03:21 -05:00
Zac Brown acf3c2dfee Add UsingMessageAnalyzerToFindETWSources.md to README (#9) 
* Create a debug version of the Lobsters nuspec.

* Create UsingMessageAnalyzerToFindETWSources.md

* Add guide for using Message Analyzer

Signed-off-by: Zac Brown <zac@zacbrown.io>

* Update links to images.

Signed-off-by: Zac Brown <zac@zacbrown.io>

* Add link to Message Analyzer howto in README.
 2016-12-13 14:03:19 -08:00
Zac Brown a8b44259fd Add document for using Message Analyzer to find new ETW sources. (#8) 
* Create a debug version of the Lobsters nuspec.

* Create UsingMessageAnalyzerToFindETWSources.md

* Add guide for using Message Analyzer

Signed-off-by: Zac Brown <zac@zacbrown.io>

* Update links to images.

Signed-off-by: Zac Brown <zac@zacbrown.io>
 2016-12-13 13:58:03 -08:00
Zac Brown 1df50dbe6c Add Debug Lobsters NuGet to list of NuGet packages. 2016-11-30 14:16:28 -08:00
Zac Brown f75e973af0 Create a debug version of the Lobsters nuspec. (#7) 2016-11-30 13:33:35 -08:00
Zac Brown c81c3c41f6 - Make projects for Managed and Native example code. (#3) 
* - Make projects for Managed and Native example code.
- Create a 'tests' directory.
- Remove SampleCSharpKrabsExe as it is redundant with respect to the example code.

Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>

* - Add note about TYPEASSERT and NDEBUG compilation flags to README.md.
- Add /W4 /WX compiler flags to NativeExample project.
- vcxproj.filters updates based on VS magic.

Signed-off-by: Zac Brown (ODSP SECURITY) <zbrown@microsoft.com>
 2016-11-28 14:06:40 -08:00
Zac Brown (ODSP SECURITY) 3d867d5ca7 Merge branch 'master' of https://github.com/Microsoft/krabsetw 2016-10-26 15:58:18 -07:00
Zac Brown (ODSP SECURITY) f231ab8b60 Update the license URL and the project URL. 2016-10-26 15:58:13 -07:00
Zac Brown 04748a576f Add NuGet packages. 2016-10-26 15:53:43 -07:00
Zac Brown (ODSP SECURITY) d741c16cc8 Initial public release. 2016-10-26 15:08:31 -07:00