There is an unsaved comment in progress. You will lose your changes if you continue. Are you sure you want to reopen the work item?
ProcessTraceData cannot parse ETL files generated on Windows 8
Windows 8 generates ETL files that where the MOF class version for ProcessTraceData is 4. TraceEvent does not know how to parse this. There's an unknown 4 byte long field between the DirectoryTableBase and UserSID properties. Unfortunately, this throws
off parsing of subsequent fields (like image name) too.