Event Tracing for Windows

ETW is a Microsoft Windows kernel-level logging mechanism that lets applications and the operating system record and consume events in real time, without the overhead of writing to a debugger or log file.