code snippet provided demonstrates how to patch the EtwEventWrite function in the ntdll.dll library on Windows using CGO (C Go).
-
Updated
Jun 27, 2024 - Go
code snippet provided demonstrates how to patch the EtwEventWrite function in the ntdll.dll library on Windows using CGO (C Go).
A proof of concept ETW consumer that captures userland events in real time, displays them, and saves them into an .etl file
Add a description, image, and links to the etweventwrite topic page so that developers can more easily learn about it.
To associate your repository with the etweventwrite topic, visit your repo's landing page and select "manage topics."