mirror of
https://github.com/repnz/etw-providers-docs
synced 2026-06-08 17:06:44 +00:00
Merge branch 'master' of https://github.com/repnz/etw-providers-docs
This commit is contained in:
@@ -1,8 +1,8 @@
|
||||
# ETW Providers Docs
|
||||
|
||||
Windows 7 - [/Manifests-Win7-7600](/Manifest-Win7-7600)
|
||||
Windows 7 - [/Manifests-Win7-7600](/Manifests-Win7-7600)
|
||||
|
||||
Windows 10 - [/Manifests-Win10-1734](/Manifest-Win10-1734)
|
||||
Windows 10 - [/Manifests-Win10-17134](/Manifests-Win10-17134)
|
||||
|
||||
Windows provides the ETW framework for event tracing. The ETW framework comes with many built-in ETW providers, but
|
||||
most of them are not documented very well.
|
||||
@@ -16,4 +16,4 @@ Moreover, in a quest to find more interesting ETW providers, I started reversing
|
||||
|
||||
Currently reverse engineered providers:
|
||||
|
||||
- Microsoft-Windows-Kernel-Audit-API-Calls (Win10)
|
||||
- [/Manifests-Win10-17134/Microsoft-Windows-Kernel-Audit-API-Calls](/Manifests-Win10-17134/Microsoft-Windows-Kernel-Audit-API-Calls.xml)
|
||||
|
||||
Reference in New Issue
Block a user