Chapter 13 of “Developing WMI Solutions” covers a very little-known subject of the WMI toolset. Event tracing is a powerful and high-performance method of instrumenting applications. It allows applications to expose very detailed information about an operation or task. The operating system uses this technology to expose activity in the Windows kernel, security subsystems, and numerous other subsystems.

Quick introduction to event tracing
Last updated on 06/09/03

The following are the available framework libraries:

Event Tracing Provider Framework
Last updated on 06/09/03