cyberstars / tools / etw-suite
EtwSuite
—Windows ETW provider browser and trace inspector.
Voir sur GitHub
C#GPL-3.0
Native Windows desktop tool for working with Event Tracing for Windows: browse providers, read metadata, consume live events, record ETL traces, filter results and inspect saved ETL, JSON or CSV captures from one place. Aids detection engineering, telemetry research and incident analysis.