suvenka 676d948235 Add process_start_key() to read ProcessStartKey from extended data ...

Add support for reading EVENT_HEADER_EXT_TYPE_PROCESS_START_KEY from
ETW extended data items, enabled via EVENT_ENABLE_PROPERTY_PROCESS_START_KEY.
The ProcessStartKey uniquely identifies a process instance across a boot
session (unlike PID which can be recycled).

Changes:
- Native C++: schema::process_start_key() in schema.hpp
- Managed .NET: TryGetProcessStartKey() on IEventRecordMetadata/EventRecordMetadata
- Test support: extended_data_builder::add_process_start_key()
- New example: UserTrace008_ProcessStartKey.cs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-06 16:18:29 -08:00

..

ManagedExamples

Add process_start_key() to read ProcessStartKey from extended data

2026-03-06 16:18:29 -08:00

NativeExamples

Add Windows ARM64 port for managed wrappers. (#234)

2024-06-04 08:46:15 -07:00