Post #901 47 Jun 6, 2020, 06:55 UTC Hiding your .NET - COMPlus_ETWEnabledhttps://blog.xpnsec.com/hiding-your-dotnet-complus-etwenabled/ XPN Infosec Blog @_xpn_ - Hiding your .NET - COMPlus_ETWEnabled It turns out that there is a method of disabling ETW in .NET, strangely exposed by setting an environment variable of COMPlus_ETWEnabled=0. This post explores how this works.