https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-etwproviderenabled
EtwProviderEnabled function (wdm.h) - Windows drivers | Microsoft Learn
The EtwProviderEnabled function verifies that a provider is enabled for event logging at a specified level and keyword.
windows driversfunctionwdmhmicrosoft