stop_etw_trace
Stop a running ETW trace, convert it to CSV and summary, and return a parsed preview. Requires elevation.
Instructions
Stop ETW trace, run tracerpt to CSV and summary, return parsed preview (requires elevation).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| session_name | Yes | ||
| output_dir | No | ||
| process_filter | No | Substring filter across CSV columns |