windbg-debugging
Drive WinDbg/DbgEng via the windbg MCP server to debug Windows crash dumps, live user-mode and kernel targets, and Time Travel Debugging (.run) traces, and to inspect or control a VBS guest's Secure Kernel (VTL1). Use when analyzing a .dmp, attaching to a process or the kernel, recording/navigating/analyzing a TTD trace, inspecting a saved state's Secure Kernel, or stopping, stepping and resuming an exact disposable VTL1 target.
Pinned to revision 7ffccaa3808a, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/windbg-debugging/SKILL.md
- skills/windbg-debugging/crash-dump.md
- skills/windbg-debugging/driver-ioctl.md
- skills/windbg-debugging/heap-walking.md
- skills/windbg-debugging/live-and-kernel.md
- skills/windbg-debugging/secure-kernel.md
- skills/windbg-debugging/setup.md
- skills/windbg-debugging/ttd.md
Every link opens the file at its source, pinned to the revision this page describes.