SubZer0MS/DiagOnEtwEvent

This program will either create a memory dump or attach Time Travel Debugging tool when a specific native or managed (.net) module (DLL) gets loaded into a process

C++