[Part 3] Logging with C/C++ applications
Check out the codes in GitHub.
If you remember in part 2, we compiled our manifest file with
and we got a header file as one of the outputs. We just have to include that header file to our sources and we are good to go.
Notes
- Any module can use the ETW provider, be it dll or exe, simultaneously. But you can also create a provider for each module if you prefer.
- For a dll, you can call the
EventRegister()
inside yourDllMain
->DLL_PROCESS_ATTACH
and yourEventUnregister()
inDLL_PROCESS_DETACH
.
Check out part 4.
---If you have any questions or feedback, please reach out @flowerinthenyt.