admin/yardenshafir-WinDbg_Scripts
1
0
Fork 0
mirror of https://github.com/yardenshafir/WinDbg_Scripts synced 2026-06-08 18:28:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create EtwAllRegisteredTraceGuids

Browse Source
This commit is contained in:
yardenshafir
2023-04-09 12:11:47 -04:00
committed by GitHub
parent e2c7c76600
commit 1804d79cb9
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
EtwAllRegisteredTraceGuids
+3
View File
@@ -0,0 +1,3 @@
dx -r0 @$GuidTable = ((nt!_ESERVERSILO_GLOBALS*)&nt!PspHostSiloGlobals)->EtwSiloState->EtwpGuidHashTable
dx -s @$nonEmptyTraceGuids = @$GuidTable.Select(bucket => bucket.ListHead[0]).Where(l => l.Flink != &l)
dx -r2 @$nonEmptyTraceGuids.Select(l => Debugger.Utility.Collections.FromListEntry(l, "nt!_ETW_GUID_ENTRY", "GuidList").Select(g => g.Guid))