Summary: Use Windows PowerShell to add an ETW provider to a session.

 How can I use Windows PowerShell to add an ETW provider to a session?

 Use the Add-NetEventProvider cmdlet and specify the name of the session and the provider. In the following example, first a net event session is created, and then the TCPIP ETW provider is added to the session:

PS C:\>New-NetEventSession -SessionName “Session01”

PS C:\> Add-NetEventProvider -Name “Microsoft-Windows-TCPIP” -SessionName  “Session01”