Further work towards decoding Windows event traces.
tdhconsume now mainly seems to have permissions errors for some traces, which might be more the way I'm running it than a coding issue.
Further work towards decoding Windows event traces.
tdhconsume now mainly seems to have permissions errors for
some traces, which might be more the way I'm running it than
a coding issue.