Introduction - If you have any usage issues, please Google them yourself
According to windows event tracking ETW (Event Trace For Windows) realize the principle of monitoring disk technology. Monitor disk read and write operations. The source code of a monitor or other-oriented. ETW can have a disk monitoring operation, file operation, the process of operation, Tcp/Udp operation and so on.