admin/yardenshafir-WinDbg_Scripts
1
0
Fork 0
mirror of https://github.com/yardenshafir/WinDbg_Scripts synced 2026-06-08 18:28:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create EtwConsumersForProcesses

Browse Source
This commit is contained in:
yardenshafir
2023-04-09 12:41:29 -04:00
committed by GitHub
parent 1804d79cb9
commit 7ab7d64a07
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
EtwConsumersForProcesses
+2
View File
@@ -0,0 +1,2 @@
dx -s @$etwConsumersForProcess = (p => p.Io.Handles.Where(h => h.Type == "EtwConsumer").Select(h => Debugger.Utility.Collections.FromListEntry(((nt!_ETW_REALTIME_CONSUMER*)&h.Object.Body)->Links, "nt!_WMI_LOGGER_CONTEXT", "Consumers").Select(l => new {Name = l->LoggerName, InstanceGuid = l->InstanceGuid, RealtimeLogfileName = l->RealtimeLogfileName})))
dx -r5 @$cursession.Processes.Select(p => new {Name = p.Name, EtwConsumers = @$etwConsumersForProcess(p)})