# STrace

> STrace reimplements the Windows DTrace syscall and ETW probes. The C++ driver is the feature-complete path and loads DLL plugins whose exports run on syscall entry and return. A Rust driver hosts a WebAssembly interpreter as a separate experiment. Example plugins log syscalls and monitor file deletes. The build uses Visual Studio 2022, a matching Windows SDK, and the Windows Driver Kit. install/install_as_admin.ps1 registers the driver. The README says the driver loads only when driver signature enforcement is off for that boot.

- Type: Tool
- Targets: Binary
- Category: Debugging and dynamic analysis
- Relationship: Foundation tool
- Sources reviewed: 2026-11-07
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/mandiant/STrace>
- Primary source: <https://github.com/mandiant/STrace/blob/39d2cc4a53ed6c45675bda950b1c6fabc825f6c6/README.md>
- Catalog page: <https://awesomerea.org/resources/strace/>
- Record JSON: <https://awesomerea.org/resources/strace/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/strace/index.md)

## Requirements & limits

- Visual Studio 2022, a matching Windows SDK, and the Windows Driver Kit. Run install/install_as_admin.ps1 as administrator.
- The README does not name a license.

## Primary sources

1. <https://github.com/mandiant/STrace/blob/39d2cc4a53ed6c45675bda950b1c6fabc825f6c6/README.md>

## More in Native binaries

- [BinAIVulHunter](https://awesomerea.org/resources/binaivulhunter/index.md) · Tool
- [pyasmtools](https://awesomerea.org/resources/pyasmtool/index.md) · Tool
- [GameRoy](https://awesomerea.org/resources/gameroy/index.md) · Tool
- [chernobog](https://awesomerea.org/resources/chernobog/index.md) · Tool
- [ProjectorRays](https://awesomerea.org/resources/projectorrays/index.md) · Tool
- [Mupen64Plus-Next](https://awesomerea.org/resources/mupen64plus-next/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.