@Priyanshu Jindal I have a POC of Process and TCP events using ETW. Will be another month before it's available (based on 3.3.1 branch). It uses this lib : https://github.com/AlienVault-Engineering/libetw