issues
search
microsoft
/
krabsetw
KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.
Other
581
stars
149
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
System.TypeInitializationException under .NET Framework 4.7.2 and 4.8
#190
securityfreax
opened
2 years ago
0
Add option to specify timestamp type
#189
pierricgimmig
opened
2 years ago
0
ImageFileName cannot be parsed with wstring?
#188
bu-shuo
opened
2 years ago
1
Checking the project with a static analyzer
#187
kaaleksandr
opened
2 years ago
0
Rename targets file
#186
swannman
closed
2 years ago
0
Rename .targets file and add missing assert specialization for bool
#185
swannman
closed
2 years ago
0
Native Nuget - Visual Studio / MsBuild integration is broken
#184
mediantt
closed
2 years ago
1
Compilation error with Windows Kit 8.1 (EventNameOffset)
#183
pierricgimmig
opened
2 years ago
3
Problem with determining the size of the property
#182
kaaleksandr
opened
2 years ago
6
Add trace::set_trace_information method
#181
pierricgimmig
closed
2 years ago
2
Check offset before accessing task name property
#180
swannman
closed
2 years ago
0
Do not specify an explicit start time when calling ProcessTrace
#179
swannman
closed
2 years ago
0
Rundown events for Kernel logger are broken
#178
mediantt
closed
2 years ago
0
parse<boolean> is identified as UINT8
#177
Gabriele91
opened
2 years ago
4
schema::task_name() returns an invalid value.
#176
Gabriele91
closed
2 years ago
0
Send schema errors to OnError callback in all cases
#175
swannman
closed
2 years ago
1
Gracefully handle schema errors when applying filters
#174
swannman
closed
2 years ago
0
Do IEventRecord objects get reused?
#173
duckfez
closed
2 years ago
8
Add additional filtering to prevent unexpected event IDs when using provider-based filtering
#172
swannman
closed
2 years ago
1
Add optional trace::create() method
#171
pierricgimmig
closed
2 years ago
2
Bump nuget version
#170
swannman
closed
2 years ago
0
Include record context when handling schema and unexpected errors
#169
swannman
closed
2 years ago
0
Updated license metadata
#168
nibassen
closed
3 years ago
0
Upgraded toolset and target platform; enabled Spectre mitigation
#167
nibassen
closed
3 years ago
0
C++ 20 fixes: convert wstring to string in provider name logging, replace deprecated traits check
#166
vpa1977
closed
3 years ago
1
C++ 20 Support
#165
vpa1977
closed
3 years ago
3
Add <clear/> to nuget.config
#164
swannman
closed
3 years ago
0
Add missing <clear/> statement
#163
swannman
closed
3 years ago
0
Replace "min" by "std::min<size_t>" to support NOMINMAX
#162
pierricgimmig
closed
3 years ago
4
Unhandled exception thrown by get_event_schema_from_tdh() in ut::forward_events()
#161
ghost
opened
3 years ago
6
No Support For Consumption of Log Files
#160
i-nino
opened
3 years ago
2
How to log "clear log event (1102)"
#159
zeze-zeze
closed
3 years ago
1
catch invalid_parameter in register_trace()
#158
zeze-zeze
closed
3 years ago
2
Microsoft-Windows-Security-Auditing not work on some versions
#157
zeze-zeze
closed
3 years ago
2
how to handle map and unmap (excluding image files) event type in krabsetw
#156
yangjian123
opened
3 years ago
6
Rundown event support and examples
#155
jdu2600
closed
3 years ago
0
Save size of data in socket_address struct
#154
starix
closed
3 years ago
2
Save size of data in socket_address struct
#153
starix
closed
3 years ago
0
how to get old_file_name, new_file_name from rename event in etw
#152
yangjian123
closed
3 years ago
1
added ability to set a default event callback (#147)
#151
jdu2600
closed
3 years ago
1
get process id and thread id -1 from etw EventHeader on windows 7
#150
yangjian123
closed
3 years ago
1
Add compatibility with 'phnt' library (https://github.com/processhacker/phnt)
#149
starix
closed
3 years ago
4
Fix parsing of boolean type
#148
starix
closed
3 years ago
1
A Way to do have a 'catch-all' callback function
#147
pathtofile
closed
3 years ago
5
Fix setup-nuget step in build pipeline
#146
swannman
closed
3 years ago
0
add support for MOF providers, and update WPP example (#143)
#145
jdu2600
closed
3 years ago
1
Improve performance for GUID std::hash specialization
#144
swannman
closed
3 years ago
0
".NET Common Language Runtime" events not captured
#143
jdu2600
closed
3 years ago
10
Reading PMC data
#142
pr8x
closed
3 years ago
8
Remove unused changelog
#141
swannman
closed
3 years ago
0
Previous
Next