Ever missed Linux's strace when debugging on Windows?

Tools like Sysinternals Process Monitor (ProcMon) are great, but heavy, GUI-only, or reliant on drivers.

I built wstrace: a standalone system call and Win32 API monitor in Rust. It runs entirely in user-space using native ETW—zero kernel drivers required.

I just released v0.2.0. Here is what is new:

  • System-Wide Tracing (wstrace all): Monitor events across the entire system simultaneously, not just single processes.
  • Modular Output Modes:
    • Live Stream (-m stream): Fast terminal output like Linux strace.
    • Summary Report (-m summary): Aggregate stats on modules, events, and errors.
    • NDJSON Export (--json): Stream structured JSON for pipelines and log forwarders.
    • Interactive TUI: Real-time filtering, search, and clipboard export.
  • Windows on ARM64 Support: Pre-compiled binaries available for both x64 and ARM64.

GitHub: github.com/gilnett/wstrace