ProcMonXv2
ProcMonXv2 copied to clipboard
procmonxv2 can not use in windows7
i found TraceSystemTraceEnableFlagsInfo flag can not use in windows7
You are correct, this flag is supported from Windows 8 only.
do you plan to support in windows 7 ? procmonxv2 has some problems in windows 7
I'm afraid my resources are limited, I'll see if I can do something about that, but no promises.
thanks , i test on windows 7 in vmware ,but get process id is -1 from event header , do you have some idea about this ? thanks
Some ETW events don't provide a process ID and it's reported as -1
on windows 7 , does fileio/create fileio/delete supply process id? i use the same etw application and test app, on windows 10 it works ,on windows7 it doesn't
I vote for it too
Hello, your code is great, please add support for Windows 7
No promises, I'll add that to my backlog.