ETW in 2026: Why Your EDR's Blind Spot Is a Single ret Instruction Fabio Baensch Fabio Baensch Fabio Baensch Follow Aug 29 ETW in 2026: Why Your EDR's Blind Spot Is a Single ret Instruction # cybersecurity # programming # opensource # cpp 1 reaction Add Comment 4 min read

Implementing ETW into our applications can actually be a lot easier than writing ~100 lines of boilerplate
Fabio Baensch
