EtwInspector

1.0.0

EtwInspector is a toolkit to research ETW components

Minimum PowerShell version

5.0

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name EtwInspector -RequiredVersion 1.0.0

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name EtwInspector -Version 1.0.0

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) 2025 Jonathan Johnson. All rights reserved.

Package Details

Author(s)

  • Jonathan Johnson

Tags

Security Research ETW

Cmdlets

Get-EtwProviders Get-EtwSecurityDescriptor Get-EtwTraceSessions Start-EtwCapture Stop-EtwCapture Export-EtwSnapshot Compare-EtwSnapshot

Dependencies

This module has no dependencies.

Release Notes

1.0.0
------
Initial Module Creation

FileList

Version History

Version Downloads Last updated
1.2.0 8 5/9/2026
1.0.0 (current version) 4 5/9/2026