wstrace: Linux strace for Windows (in Rust, Zero Drivers)

Ever missed Linux's strace when debugging on Windows?

Tools like Sysinternals Process Monitor (ProcMon) are great, but heavy, GUI-only, or reliant on drivers.

I built wstrace: a standalone system call and Win32 API monitor in Rust. It runs entirely in user-space using native ETW—zero kernel drivers required.

I just released v0.2.0. Here is what is new:

• System-Wide Tracing (wstrace all): Monitor events across the entire system simultaneously, not just single processes.
• Modular Output Modes:
  • Live Stream (-m stream): Fast terminal output like Linux strace.
  • Summary Report (-m summary): Aggregate stats on modules, events, and errors.
  • NDJSON Export (--json): Stream structured JSON for pipelines and log forwarders.
  • Interactive TUI: Real-time filtering, search, and clipboard export.
• Windows on ARM64 Support: Pre-compiled binaries available for both x64 and ARM64.

GitHub: github.com/gilnett/wstrace