Skip to content

Commit

Permalink
Change version check for Microsoft-Windows-Kernel-Process
Browse files Browse the repository at this point in the history
  • Loading branch information
randomascii committed Mar 31, 2020
1 parent 6cdb87f commit 17979d0
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions UIforETW/UIforETWDlg.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -1093,11 +1093,10 @@ void CUIforETWDlg::OnBnClickedStarttracing()
// Memory-> Virtual Memory Snapshots. On windows 8.1 and above this makes the working set
// scanning in UIforETW unnecessary.
userProviders += L"+Microsoft-Windows-Kernel-Memory:0xE0";
if (IsWindowsTenOrGreater())
if (IsWindows8Point1OrGreater())
{
// This includes process freeze events, thread priority change events, and
// other good stuff. I don't know when it was first created and I can't easily
// test so I'm gating this to Windows 10.
// other good stuff. This was apparently added in Windows 8.1.
userProviders += L"+Microsoft-Windows-Kernel-Process";
}

Expand Down

0 comments on commit 17979d0

Please sign in to comment.