Capture and parse CDP and LLDP packets on local or remote computers

Derive measurements (facts per an observer) from ETL data. Wraps TraceEvent

Windows ETW Consumer for PowerShell

Windows ETW (Event Tracing) audit toolkit — active trace sessions, providers, consumer processes, and ETW tampering detection