Repository navigation
Log EC console to the Windows Event Log - #2
Draft
JohnAZoidberg wants to merge 7 commits into
Draft
JohnAZoidberg wants to merge 7 commits into
JohnAZoidberg wants to merge 7 commits into
Conversation
Poll the EC console buffer and write each line to the Framework-CrosEcBus/Console event log channel, so it persists across boots. The Event Log service caps it at 10 MB.
Newer WDKs only ship x64 InfVerif.dll, which 32-bit MSBuild can't load > INF verification exception: Unable to load DLL 'x86\InfVerif.dll': > The specified module could not be found Signed-off-by: Daniel Schaefer <dhs@frame.work>
Signed-off-by: Daniel Schaefer <dhs@frame.work>
The channel defaulted to Application isolation, which is served by the EventLog-Application session. That session never received events from the kernel-mode provider, so the driver saw the provider as disabled, never read the EC console, and the log stayed empty. Kernel-mode providers need System isolation (EventLog-System session), like the in-box kernel driver channels. Signed-off-by: Daniel Schaefer <dhs@frame.work>
Document how to check that the right driver build is installed, that the event provider and channel are registered and enabled, and that the Event Log service is listening. Also how to capture and decode the WPP trace (with or without the WDK), and how to record the provider's events in a private session to rule out the channel configuration. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Daniel Schaefer <dhs@frame.work>
Signed-off-by: Daniel Schaefer <dhs@frame.work>
Signed-off-by: Daniel Schaefer <dhs@frame.work>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.