Skip to content

Instantly share code, notes, and snippets.

Last active February 14, 2023 06:57
What would you like to do?
Disable ETW of the current PowerShell session
# This PowerShell command sets 0 to System.Management.Automation.Tracing.PSEtwLogProvider etwProvider.m_enabled
# which effectively disables Suspicious ScriptBlock Logging etc. Note that this command itself does not attempt
# to bypass Suspicious ScriptBlock Logging for readability.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment