KERNEL32 or KERNELBASE modules not loaded in WinDbg
I am debugging a driver running on a Windows 11 VM from my Windows 11 host over COM channel. When I first break inside the VM, I see only nt
module getting loaded.
How to get a file security descriptor by its handle in WinDBG kernel mode?
I have a handle associated with some file and I need to get its security descriptor in WinDbg kernel mode, but I cannot find it anywhere.
How to run command automatically when hit Break instruction exception – code 80000003 (first chance)?
I am trying to perform long-term reboot debugging on a system, but the system randomly encounters some Break instruction exceptions that pause my tests. Unfortunately, the code for this Break instruction exception is 80000003, which is the same as the issue I am trying to debug, so I cannot directly ignore it using the event filter. Therefore, I would like to ask if there is any command to determine if a Break instruction exception is caused by a specific address and, if so, to let it continue execution automatically.