search

fireeye / pywintrace

ETW Python Library
Apache License 2.0
267 stars 59 forks source link

Nothing happens when I run the example. #36

Open 625781186 opened 4 years ago

625781186 commented 4 years ago

image

I don't know much about ETW, so providers = [etw.ProviderInfo('Some Provider', etw.GUID("{11111111-1111-1111-11111111}"))] how do I find this GUID ({11111111-1111-1111-11111111})?

klimov-andre commented 4 years ago

There no provider with GUID("{11111111-1111-1111-11111111}") by default. Try logman query providers in Command Prompt as Administrator to list all available providers on the system.

UnnameBao commented 4 years ago

There no provider with GUID("{11111111-1111-1111-11111111}") by default. Try logman query providers in Command Prompt as Administrator to list all available providers on the system.

what if I don't see any providers? how do I create one?