SEC 440 WPA - JadenGil/Jaden-Tech-Journal GitHub Wiki

Deliverable 1:

These images show notepad.exe running and me saving ETWLab.txt to the ETW Folder on the File I/O section of Windows Performance Analyzer.

Deliverable 2:

Using the search function I found notepad.exe

Deliverable 3:

Using logman query by using the name of the provider. (Command highlighted)

Deliverable 4:

Deliverable 5:

Deliverable 6:

Deliverable 7:

Deliverable 8:

Deliverable 9:

Notepad:

CMD:

Paint:

Deliverable 10:

Deliverable 11:

---