Post #2576 1.64K Apr 10, 2025, 04:44 UTC Hooking Context Swaps with ETWhttps://archie-osu.github.io/etw/hooking/2025/04/09/hooking-context-swaps-with-etw.html Archie’s reversing diary Hooking Context Swaps with ETW Event Tracing for Windows (ETW) is a kernel mechanism designed to log certain activity happening in the system. Despite its seemingly innocuous description, ETW can be a valuable source of information and a very interesting hook point for both anti-cheats…