Simple project that demonstrates how an ETW consumer can be created just by using NTDLL - View it on GitHub