Is there something like the Linux ptrace syscall in Windows?

by

You can use ETW to trace system calls. When starting the trace, in EVENT_TRACE_PROPERTIES, you can add EVENT_TRACE_FLAG_SYSTEMCALL flag to EnableFlags. This enables SysCallEnter and SysCallLeave events, as described here.

More Related Contents:

  1. Adding a directory to the PATH environment variable in Windows
  2. How do I run two commands in one line in Windows CMD?
  3. Parallel execution of shell processes
  4. Is there a /dev/null on Windows?
  5. How to run a PowerShell script without displaying a window?
  6. Mount current directory as a volume in Docker on Windows 10
  7. How to smooth ugly jitter/flicker/jumping when resizing windows, especially dragging left/top border (Win 7-10; bg, bitblt and DWM)?
  8. Get DOS path instead of Windows path
  9. Windows Batch File Looping Through Directories to Process Files?
  10. Windows and renaming folders, the ‘con’ issue [closed]
  11. Capture output command CMD
  12. Why does ECHO command print some extra trailing space into the file?
  13. Setting application info in a Qt executable file on Windows
  14. Why does CreateProcess give error 193 (%1 is not a valid Win32 app)
  15. What is the Windows equivalent of the diff command?
  16. What is the difference between user variables and system variables?
  17. Batch file to split .csv file
  18. Running another program in Windows bat file and not create child process
  19. IIS w3svc error
  20. Win32 API analog of sending/catching SIGTERM
  21. Cannot remove item, The Directory is not empty
  22. How does a Windows antivirus hook into the file access process?
  23. How do you avoid over-populating the PATH Environment Variable in Windows?
  24. UTF-8 in Windows 7 CMD [duplicate]
  25. Why doesn’t my stderr redirection end after command finishes? And how do I fix it?
  26. creating batch script to unzip a file without additional zip tools
  27. Can’t access 127.0.0.1
  28. How do I add/update a property inside an MSI from the command-line?
  29. OpenSSL hangs during PKCS12 export with “Loading ‘screen’ into random state”
  30. How do I find out the browser’s proxy settings?

Leave a Comment