jbgalet / pyetw

ETW tracer for python

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ETWTracer

Requires nuget

  • nuget install

Use a modified version of krabsetw (https://github.com/Microsoft/krabsetw) to handle structTypes

krabsetw limitations apply here too:

  • etwtracer only support x64. No effort has been made to support x86.
  • etwtracer is only supported on Windows 7 or Windows 2008R2 machines and above.

About

ETW tracer for python


Languages

Language:C++ 95.6%Language:Python 2.2%Language:C 2.1%