Skip to content

Releases: lowleveldesign/wtrace

1.1

17 Dec 13:03
Compare
Choose a tag to compare
1.1

ALPC support added:

...
21888.9656 (7124) ALPC/WaitForReply (0x1A10)
21888.9919 ALPC 08cli (228) ---(0x1A10)--> 08comsrv (6060)
21889.0919 ALPC 08cli (228) <--(0x1A10)--- 08comsrv (6060)
21889.1401 (7124) ALPC/WaitForReply (0x1A10)
21889.1602 ALPC 08cli (228) ---(0x1A10)--> 08comsrv (6060)
21889.5194 ALPC 08cli (228) <--(0x1A10)--- 08comsrv (6060)
21890.0651 (7124) ALPC/WaitForReply (0x1A10)
21890.0910 ALPC 08cli (228) ---(0x1A10)--> svchost (516)
21890.3824 ALPC 08cli (228) <--(0x1A10)--- svchost (516)
21890.5377 (7124) ALPC/WaitForReply (0x1A10)
21890.5600 ALPC 08cli (228) ---(0x1A10)--> svchost (516)
21890.6640 ALPC 08cli (228) <--(0x1A10)--- svchost (516)
31189.9461 ALPC 08cli (228) ---(0x1960)--> csrss (9020)
31189.9622 ALPC 08cli (228) ---(0x19C4)--> csrss (9020)
...

======= ALPC =======
Filtered process connected through ALPC with:
- csrss (9020)
- svchost (516)
- lsass (836)
- 08comsrv (6060)

1.0

21 Oct 02:45
Compare
Choose a tag to compare
1.0

Initial release. More info in a blog post