Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

Stack trace in xperf for file access

KunalKunal Member - All Emails Posts: 20
Hi,

A process on my windows machine is deleting one file. Can I find out who is deleting the file using etl logs collected using xperf? Also can I get the stack trace of the delete operation ?

Thanks

Comments

  • Scott_Noone_(OSR)Scott_Noone_(OSR) Administrator Posts: 3,073
    I'd say you're probably better of just using Process Monitor. Any specific reason you're trying to do this through ETW?

    -scott
    OSR
    @OSRDrivers

    -scott
    OSR

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Writing WDF Drivers 25 Feb 2019 OSR Seminar Space
Developing Minifilters 8 April 2019 OSR Seminar Space