#etw

Event Tracing for Windows (ETW): The Kernel's Built-In Instrumentation System

The high-performance, always-available kernel tracing infrastructure that nearly every serious Windows diagnostic and monitoring tool is actually built on.