Search results

Feature request - store user-defined context inside trace

Status: Open.

#263 In microsoft/krabsetw;

· pygrum opened on Apr 2, 2025

how to use winkernel-network for TCP/IP event ?

Status: Open.

#262 In microsoft/krabsetw;

· mxxxoonst opened on Mar 16, 2025

Can't find schema for context_switch_provider

Status: Open.

#260 In microsoft/krabsetw;

· FaultyPine opened on Feb 16, 2025

error: integer value 31 is outside the valid range of values [0, 1] for the enumeration type '_SYSTEM_INFORMATION_CLASS'

Status: Open.

#259 In microsoft/krabsetw;

· phallot opened on Feb 12, 2025

Strange TdhGetEventInformation failure for SampleProf events

Status: Open.

#249 In microsoft/krabsetw;

· clemenswasser opened on Nov 12, 2024

How to access member of a class during inside callback function ?

Status: Open.

#247 In microsoft/krabsetw;

· Tanuj22 opened on Oct 21, 2024

Question: can I use krabsetw for past events?

Status: Open.

#246 In microsoft/krabsetw;

· LucioDonda opened on Oct 16, 2024

KERNEL_AUDIT_API_SETCONTEXTTHREAD not logs for syswow64 process .

Status: Open.

#245 In microsoft/krabsetw;

· DefenderLab opened on Sep 24, 2024

Missing events when event burst happen even after setting the EVENT_TRACE_PROPERTIES to large number of buffers?

Status: Open.

#235 In microsoft/krabsetw;

· subvert0r opened on May 29, 2024

Couldn't installed KrabsETW nuget package via Visual Studio 2022

Status: Open.

#232 In microsoft/krabsetw;

· KnightChaser opened on Mar 25, 2024

both Windows XP and Windows 2008 support ETW. Why not support these two systems?

Status: Open.

#230 In microsoft/krabsetw;

· zhuxiujia opened on Feb 2, 2024

Why Service Control Manager provider doesn't generate any event id?

Status: Open.

#225 In microsoft/krabsetw;

· subvert0r opened on Jan 17, 2024