Sealighter - Easy ETW Tracing for Security Research

I created this project to help non-developers dive into researching Event Tracing for Windows (ETW) and Windows PreProcessor Tracing (WPP).

• Subscribe to multiple ETW and WPP Providers at once
• Automatically parse events into JSON without needing to know format
• Robust Event filtering including filter chaining and filter negation
• Output to Standard out, File, or Windows Event Log (to be ingested by other tools)
• Get event stack traces
• Configurable Buffering many events in a time period into one with a …

research security security research splunk teams tool tracing windows