Event Tracing for Windows (ETW)

GPTKB entity

Predicate	Object
gptkbp:instanceOf	gptkb:software
gptkbp:accessibleBy	gptkb:PowerShell gptkb:Logman gptkb:PerfView gptkb:TraceView gptkb:WPA_(Windows_Performance_Analyzer) gptkb:Windows_Performance_Toolkit gptkb:xperf .NET APIs C/C++ APIs
gptkbp:category	Windows administration System monitoring Software diagnostics
gptkbp:developedBy	gptkb:Microsoft
gptkbp:documentation	https://docs.microsoft.com/en-us/windows/win32/etw/about-event-tracing
https://www.w3.org/2000/01/rdf-schema#label	Event Tracing for Windows (ETW)
gptkbp:introducedIn	gptkb:Windows_2000
gptkbp:platform	gptkb:Microsoft_Windows
gptkbp:relatedTo	gptkb:Windows_Management_Instrumentation_(WMI) gptkb:Windows_Event_Log gptkb:Performance_Counters gptkb:System.Diagnostics.Tracing
gptkbp:supports	multiple consumers file logging circular logging kernel-mode tracing multiple providers post-mortem event tracing real-time event tracing user-mode tracing
gptkbp:usedFor	diagnostics troubleshooting performance monitoring event logging
gptkbp:bfsParent	gptkb:Windows_Eventing_6.0
gptkbp:bfsLayer	6