Login
From:
XPN InfoSec Blog
(Uncensored)
subscribe
Hiding your .NET - COMPlus_ETWEnabled - XPN InfoSec Blog
https://blog.xpnsec.com/hiding-your-dotnet-complus-etwenabled/
links
backlinks
It turns out that there is a method of disabling ETW in .NET, strangely exposed by setting an environment variable of COMPlus_ETWEnabled=0. This post explores how this works.
Roast topics
Find topics
Find it!
