Share via

How to get NT kernel level 3 trace?

minjiew 1 Reputation point
2022-09-21T05:25:53.963+00:00

With the guide of MSDN, I am able to get NT Kernel trace, but the trace only include trace level 0.
https://learn.microsoft.com/en-us/windows/win32/etw/configuring-and-starting-the-nt-kernel-logger-session?redirectedfrom=MSDN

How to set the filter mask to 0xffff with code instead of set registry to capture the NT Kernel trace level 3?

Thanks

Windows for business | Windows Client for IT Pros | Devices and deployment | Other
Developer technologies | C++
Developer technologies | C++

A high-level, general-purpose programming language, created as an extension of the C programming language, that has object-oriented, generic, and functional features in addition to facilities for low-level memory manipulation.

0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.