Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That would work for anything MS considers diagnostic data, but that is not a complete picture of what it's sending and why.


Couple that with monitoring the vast amount of ETW logging providers Windows gives you, and you'll see why. E.g.: the WinHTTP provider of who (PID) contacted where including URL, DNS ETW for lookups and who (PID), etc.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: