ferrisetw 1.2.0

Basically a KrabsETW rip-off written in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

use bitflags::bitflags;

use windows::Win32::System::Diagnostics::Etw;

bitflags! {
    pub struct TraceFlags: u32 {
        const EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0 =  Etw::EVENT_ENABLE_PROPERTY_IGNORE_KEYWORD_0;
        const EVENT_ENABLE_PROPERTY_PROVIDER_GROUP =    Etw::EVENT_ENABLE_PROPERTY_PROVIDER_GROUP;
        const EVENT_ENABLE_PROPERTY_PROCESS_START_KEY = Etw::EVENT_ENABLE_PROPERTY_PROCESS_START_KEY;
        const EVENT_ENABLE_PROPERTY_EVENT_KEY =         Etw::EVENT_ENABLE_PROPERTY_EVENT_KEY;
        const EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE = Etw::EVENT_ENABLE_PROPERTY_EXCLUDE_INPRIVATE;
        const EVENT_ENABLE_PROPERTY_SID =               Etw::EVENT_ENABLE_PROPERTY_SID;
        const EVENT_ENABLE_PROPERTY_TS_ID =             Etw::EVENT_ENABLE_PROPERTY_TS_ID;
        const EVENT_ENABLE_PROPERTY_STACK_TRACE =       Etw::EVENT_ENABLE_PROPERTY_STACK_TRACE;
    }
}