microsoft/krabsetw

View on GitHub

KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.

Stars: 801
Forks: 167
Open beginner issues: 0
Indexed issues: 19
Avg merge: 3d 15m
Merged PRs (30d): 2

Dominant language: C++
License: No license data
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

19 open issues indexed

how to trace VirtualAlloc + CallStack? Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

microsoft/krabsetw#278 · Opened Aug 18, 2026
can you add an example for monitoing reistry write,please Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/krabsetw#270 · Opened Dec 17, 2025
Logging to ETL file Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/krabsetw#264 · 1 comment · Opened Jun 13, 2025
Feature request - store user-defined context inside trace Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/krabsetw#263 · Opened Apr 2, 2025
How to access member of a class during inside callback function ? Open

needs-repro

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/krabsetw#247 · 2 comments · Opened Oct 21, 2024
Ability to control EVENT_FILTER_DESCRIPTOR Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 30/100

microsoft/krabsetw#221 · 1 comment · Opened Dec 20, 2023
Expose ExtendedData in a more general way. Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 30/100

microsoft/krabsetw#205 · Opened Feb 23, 2023
Possible race condition Open

needs-repro

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/krabsetw#200 · 1 comment · Opened Oct 7, 2022
Question: possible inconsistency between schema, schema_key and the MS doc Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/krabsetw#195 · 1 comment · Opened Aug 3, 2022
Wrong schema retrieval with TraceLogging events Open

needs-repro

Difficulty 5/5 Over a week Newbie friendliness 25/100

microsoft/krabsetw#193 · 2 comments · Opened Jul 13, 2022
Add option to specify timestamp type Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

microsoft/krabsetw#189 · Opened Dec 10, 2021
Problem with determining the size of the property Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/krabsetw#182 · 6 comments · Opened Sep 28, 2021
parse<boolean> is identified as UINT8 Open

needs-repro

microsoft/krabsetw#177 · 4 comments · 1 assignee · Opened Sep 8, 2021
Unhandled exception thrown by get_event_schema_from_tdh() in ut::forward_events() Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

microsoft/krabsetw#161 · 6 comments · Opened Jun 9, 2021
No Support For Consumption of Log Files Open

feature request

Difficulty 4/5 3-5 days Newbie friendliness 35/100

microsoft/krabsetw#160 · 2 comments · 1 reaction · Opened Jun 4, 2021
Remove references to the retired Microsoft Message Analyzer in the documentation Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

microsoft/krabsetw#98 · 1 comment · Opened Feb 9, 2020
Add RelatedActivityId to the events Open

feature request

Difficulty 3/5 1-2 days Newbie friendliness 35/100

microsoft/krabsetw#64 · 3 comments · Opened Dec 7, 2018
Better performance in event parser property_iterator Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

microsoft/krabsetw#62 · 12 comments · 1 reaction · Opened Nov 11, 2018
Add ability for krabsetw trace sessions to be updated while running Open

feature request

Difficulty 5/5 Over a week Newbie friendliness 35/100

microsoft/krabsetw#36 · Opened Feb 8, 2018

microsoft/krabsetw

Get new issues in your inbox