A research aid for tracing security relevant events in the CLR via ETW for detecting malicious assemblies. - dotnet-runtime-etw.py| Gist
