Manage already-running traces

[daladim]

Maybe ferrisetw could be used to list and control already existing traces.

See QueryAllTracesW : https://learn.microsoft.com/en-us/windows/win32/api/evntrace/nf-evntrace-queryalltracesw

Could it also stop them? Subscribe to them? etc.

[daladim]

Subscribing to an existing trace should be possible, just call OpenTraceW() on an existing trace name.

I'm not sure whether that's absolutely a good idea, because we're not sure then what providers have been setup (and in the current Rust code, this means we have no Providers nor their callback closures initialized).
Maybe closing and re-starting the trace would be the most sensible choice