wstrace: Linux strace for Windows (in Rust, Zero Drivers)

Ever missed Linux's strace when debugging on Windows?

Tools like Sysinternals Process Monitor (ProcMon) are great, but heavy, GUI-only, or reliant on drivers.

I built wstrace: a standalone system call and Win32 API monitor in Rust. It runs entirely in user-space using native ETW—zero kernel drivers required.

I just released v0.2.0. Here is what is new:

• System-Wide Tracing (wstrace all): Monitor events across the entire system simultaneously.
• Output Modes:
  • Live Stream (-m stream): Fast stdout terminal stream like Linux strace.
  • Interactive TUI (default): Real-time filtering, search, and clipboard export.
• JSON Export (--export-json <file>): Save captured session traces to a JSON file.
• Windows on ARM64 Support: Pre-compiled binaries available for both x64 and ARM64.

GitHub: github.com/gilnett/wstrace