ProcMonXv2 icon indicating copy to clipboard operation
ProcMonXv2 copied to clipboard

procmonxv2 can not use in windows7

Open yangjian123 opened this issue 4 years ago • 9 comments

i found TraceSystemTraceEnableFlagsInfo flag can not use in windows7

yangjian123 avatar Dec 02 '20 11:12 yangjian123

You are correct, this flag is supported from Windows 8 only.

zodiacon avatar Dec 02 '20 13:12 zodiacon

do you plan to support in windows 7 ? procmonxv2 has some problems in windows 7

yangjian123 avatar Dec 02 '20 13:12 yangjian123

I'm afraid my resources are limited, I'll see if I can do something about that, but no promises.

zodiacon avatar Dec 02 '20 14:12 zodiacon

thanks , i test on windows 7 in vmware ,but get process id is -1 from event header , do you have some idea about this ? thanks

yangjian123 avatar Dec 03 '20 10:12 yangjian123

Some ETW events don't provide a process ID and it's reported as -1

zodiacon avatar Dec 03 '20 10:12 zodiacon

on windows 7 , does fileio/create fileio/delete supply process id? i use the same etw application and test app, on windows 10 it works ,on windows7 it doesn't

yangjian123 avatar Dec 03 '20 12:12 yangjian123

I vote for it too

dr-dba avatar Dec 31 '21 15:12 dr-dba

Hello, your code is great, please add support for Windows 7

Alireza-A0 avatar Jan 23 '24 12:01 Alireza-A0

No promises, I'll add that to my backlog.

zodiacon avatar Jan 25 '24 14:01 zodiacon