Table of contents
Collapse the table of content
Expand the table of content

Event Tracing for Windows (ETW)

Last Updated: 1/24/2017

Event Tracing for Windows (ETW) provides a mechanism to trace and log events that are raised by user-mode applications and kernel-mode drivers. ETW is implemented in the Windows operating system and provides developers a fast, reliable, and versatile set of event tracing features.

Topics in this section include:

About Event Tracing for Drivers

Adding Event Tracing to Kernel-Mode Drivers

ETW Kernel-Mode Reference

Send comments about this topic to Microsoft

© 2017 Microsoft