Hello! I am learning how to use ETW. I was able to create manifest file and use generated macroses (EventWrite...). However I can’t successfully install the manifest:
C:\Users\adm\Desktop>wevtutil im iomon_etw.man
**** Warning: The resource file for publisher Iomon was not found or could not be opened.
**** Warning: Publisher Iomon resources could not be found or are not accessible
to the Local Service account.
As I understand that means that some resources aren’t compiled in sys file(maybe I’m wrong). I am doing everything step by step according to tutorial https://docs.microsoft.com/en-us/windows-hardware/drivers/devtest/adding-event-tracing-to-kernel-mode-drivers .
What should I do to fix this?