You are browsing as a guest. Sign up (or log in) to start making projects!

9h 53m 23s logged

Devlog #2 of my Task Manager-History tool using Rust or whatever I should call it


Code progress

I have successfully managed to start both a classic ETW session and a modern one and receive events from them.

The difference in how the two work is that the latter uses EnableTraceEx2() (or earlier in its’ lifetime named something similar) to enable all kinds of providers while the former uses flags for the session start to enable only kernel-providers.

I’ve also cleaned all of the comments from my code and pasted all of the commented versions into a .md file.


Logging

I’ve also logged about my understanding of the two different session versions, how they work and what the contrast between them tell me about the ETW architecture.

Also written about wrappers in windows code, type casting, the difference between references and pointers in Rust, written a summary of how ETW works etc.

Logging is definitely helping me remember what I’ve learned about Rust and the windows API as well as keeping both my progress and where I am going clear.


Next?

Next up is probably going to be the UI of my program as a desktop application, I have a vision of how I want it to look and I think starting to design it now is going to help me get to know what kind of data I am looking to receive from the events.


Other

I think I’m gonna keep these a little shorter just saying what I’ve done instead of explaining how everything works.

Also if my logging shouldn’t count as hackatime time please let me know asap

0
1

Comments 0

No comments yet. Be the first!