Share via

Including OSCapture in a Run-Time Image (Windows Embedded CE 6.0)

  • Article

1/5/2010

You can create a run-time image that automatically starts OSCapture during boot by setting two environment variables before you build. It is also possible to set them via the command line in a build window. OSCapture will run in the background, managing the data in the CeLog RAM buffer, until you trigger it to store the buffered data into a log file.

Note:   Do not add CeLog to shipping devices. The goal is to avoid performance or memory loss due to CeLog and also to reduce the attack-surface through which an attacker could try to compromise the system.

Procedures

To enable OSCapture from Platform Builder

  1. In the Project menu, select Properties.

  2. In the Property Pages window, choose Configuration Properties and then choose Build Options.

  3. In the Build Options box, make sure Enable Event Tracking During Boot (IMGCELOGENABLE=1) is checked.

    This adds CeLog.dll to ROM and causes the kernel to load it during boot.

  4. Make sure Buffer tracked events in RAM (IMGOSCAPTURE=1) is checked.

    This adds OSCapture.exe to ROM and causes the OS to launch it during boot.

  5. Click OK.

  6. Build the run-time image.

    For more information, see Building and Downloading a Run-Time Image.

See Also

Tasks

Enabling CeLog Event Tracking in a Run-Time Image

Other Resources

OSCapture.exe