41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0bb4f-6f12-7005-939d-0c2e0c8432e2

Fixing empty paths in FileIO events (ETW)

lowleveldesign.wordpress.com · published 15 August 2020

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at lowleveldesign.wordpress.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 12
Words captured: 1,587

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/lowleveldesign/wtrace

github.com

https://www.nuget.org/packages/Microsoft.Diagnostics.Tracing.TraceEvent/

nuget.org

https://docs.microsoft.com/en-us/windows/win32/etw/diskio

docs.microsoft.com

https://docs.microsoft.com/en-us/windows/win32/etw/fileio

docs.microsoft.com

https://docs.microsoft.com/en-us/windows/win32/api/evntcons/ns-evntcons-event_record

docs.microsoft.com

https://docs.microsoft.com/en-us/windows/win32/api/evntcons/ns-evntcons-event_header

docs.microsoft.com

https://github.com/microsoft/perfview/blob/V1.9.65/src/TraceEvent/DynamicTraceEventParser.cs

github.com

https://github.com/microsoft/perfview/blob/master/src/TraceEvent/Parsers/KernelTraceEventParser.cs

github.com

https://github.com/microsoft/perfview/blob/V1.9.65/src/TraceEvent/Parsers/KernelTraceEventParser.cs

github.com

https://docs.microsoft.com/en-us/windows/win32/etw/fileio-name

docs.microsoft.com

https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/ns-wdm-_file_object

docs.microsoft.com

https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/ns-ntifs-_fsrtl_advanced_fcb_header

docs.microsoft.com