This DRAKVUF plugin enables VMI-based monitoring of emitted ETW events (Event Tracing for Windows).
etw virtual-machine-introspection vmi drakvuf windows-event-tracing event-tracing-windows drakvuf-plugin
-
Updated
Jun 17, 2026 - C++