The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
I am trying to start an ETW session from a command line to capture USB data so that I can troubleshoot a problem with a HID device on a remote machine. This machine doesn't use XHCI so I'm using the Microsoft-Windows-USB-USBPORT and Microsoft-Windows-USB-USBHUB providers from Windows 10. I can get an ETL file that shows device enumeration (for example), but it never contains the data going to/from the device I'm interested in. Do those 2 providers capture the data, or is there another one I should be looking at? Or do I just need to change something on my commands to logman to capture the data? Alternatively, of course, is that I don't know how Message Analyser works
Also, now that MS has killed off Message Analyser, what's the best/recommended way of looking at the file once I have it? I still have a copy of Message Analyser, but wondered if there is a recommended replacement?
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!|
|Writing WDF Drivers||7 Dec 2020||LIVE ONLINE|
|Internals & Software Drivers||25 Jan 2021||LIVE ONLINE|
|Developing Minifilters||8 March 2021||LIVE ONLINE|