Home

Awesome

Windows 10 ETW Events

Events from all manifest-based and mof-based ETW providers across Windows 10 versions

VersionEventsManifest ProvidersMOF ProvidersUnknown Providers
151143,31981119524
160745,56983019323
170346,53284219431
170947,68785419328
180348,22685519229
180949,08086319025
190349,73486718724
190949,77386818724
200450,39187118725
200950,39987218725
21H150,50587118728
21H251,69687618725

Want the data in a different format?

Roberto Rodriguez @Cyb3rWard0g

Useful references

Microsoft

Matt Graeber @mattifestation

Nasreddine Bencherchali @nasbench

Pat H @pathtofile

Zac Brown @zacbrown

Ruben Boonen @FuzzySec

Pavel Yosifovich @zodiacon

Elias Bachaalany @0xeb