ferrisetw 1.2.0

Basically a KrabsETW rip-off written in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

//! Abstraction layer for Native functions and types
//!
//! This module interacts with the Windows native functions and should abstract all `unsafe` calls
pub(crate) mod etw_types;
pub(crate) mod evntrace;
pub(crate) mod pla;
pub(crate) mod sddl;
pub(crate) mod tdh;
pub(crate) mod tdh_types;
pub mod time;
pub(crate) mod version_helper;

// These are used in our custom error types, and must be part of the public API
pub use evntrace::EvntraceNativeError;
pub use pla::PlaError;
pub use sddl::SddlNativeError;
pub use tdh::TdhNativeError;

// These are returned by some of our public APIs
pub use etw_types::extended_data::EventHeaderExtendedDataItem;
pub use etw_types::extended_data::ExtendedDataItem;
pub use etw_types::DecodingSource;
pub use evntrace::ControlHandle;
pub use evntrace::TraceHandle;
pub use windows::Win32::System::Diagnostics::Etw::{
    EVENT_EXTENDED_ITEM_INSTANCE, EVENT_EXTENDED_ITEM_STACK_TRACE32,
    EVENT_EXTENDED_ITEM_STACK_TRACE64,
};