Check out the codes in GitHub.
If you remember in part 2, we compiled our manifest file with
and we got a header file as one of the outputs. We just have to include that header file to our sources and we are good to go.
- Any module can use the ETW provider, be it dll or exe, simultaneously. But you can also create a provider for each module if you prefer.
- For a dll, you can call the
Check out part 4.---
If you have any questions or feedback, please reach out @flowerinthenyt.