Windows API Monitoring through ETW

[manorit2001]

if we can extract the registry changes through ETW logs and map them to respective registry keys then it'll be good

[manishkumar102317]

We are trying to use the ETW to extract all the windows API functions that got hooked. This can be used to extract the process, registry and file changes.