Correlating kernel notifications with the lack of ETW events to detect ETW Patching - View it on GitHub