Introduction - Microsoft

Vendor-supplied user-mode driver code can use Event Tracing for Windows (ETW) to generate a trace log of driver events. The logs can be viewed using the tracing tools provided with the WDK. The user-mode components supplied by Microsoft start trace sessions that record their activities and note such events as driver hangs, time-outs, and failures. ................
................