Event Tracing for Windows, a kernel-level mechanism for tracing events from drivers and applications; it doesn't capture network packets.
Also called Event Tracing for Windows.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains ETW in context, with comparison tables and the common traps.
Related terms
- Data Collector Set
In Performance Monitor, a scheduled bundle that logs chosen counters together with ETW traces and configuration information.