Windows Internals: Check Your Privilege - The Curious Case of ETW’s SecurityTrace Flag

Consuming from Microsoft-Windows-Threat-Intelligence without Antimalware-PPL or kernel patching/driver loading.