/pyetw

ETW tracer for python

Primary LanguageC++

ETWTracer

Requires nuget

  • nuget install

Use a modified version of krabsetw (https://github.com/Microsoft/krabsetw) to handle structTypes

krabsetw limitations apply here too:

  • etwtracer only support x64. No effort has been made to support x86.
  • etwtracer is only supported on Windows 7 or Windows 2008R2 machines and above.