Description: According to windows event tracking ETW (Event Trace For Windows) realize the principle of monitoring disk technology. Monitor disk read and write operations. The source code of a monitor or other-oriented. ETW can have a disk monitoring operation, file operation, the process of operation, Tcp/Udp operation and so on.
File list (Check if you may need any files):