The Anatomy of Windows Telemetry

Explore the intricate architecture of Windows Telemetry in this 54-minute conference talk from WEareTROOPERS. Delve into the German Federal Office for Information Security's perspective on data collection, examining Event Tracing for Windows (ETW) as a primary collection point and its system integration. Investigate secondary data sources and the role of the Diagnostics Tracking Service in managing collected information. Learn about methods for disabling and reducing Windows Telemetry, and gain valuable insights into the implications of telemetry in modern operating systems. Conclude with a Q&A session and final thoughts on the impact of Windows Telemetry on user privacy and system performance.

Intro
The German Federal Office for Information Security
Windows Telemetry Architecture
ETW: Data collection points
Data collection points: System integration
Secondary data source Data collection management
Data sources and the Diagnostics Tracking Service cont.
Disabling and reducing Windows Telemetry cont.
Final remarks: Telemetry
Thank you for your attention! Questions?
Final remarks: Windows Telemetry