I’ve been doing some research into the Windows Filtering Platform and the information available at each of the various filtering layers. In particular, I’ve been focusing on the information available Read more
02
Jul
Windows System Software -- Consulting, Training, Development -- Engineering Excellent, Every Time.
All posts in DEBUG
Path: Home / Developer's Blog /
Kernel mode debugging
17
OctAs a file system filter developer, one of the great pains in life is when a file system operation fails deep in the bowels of the file system. For example, Read more
22
JunI was looking at a few different crashes today that were all eerily similar. In doing so, I realized that I hadn’t asked if these were all different systems or Read more
20
JunWell, this one took us by surprise… MmBuildMdlForNonPagedPool is the standard shortcut function drivers use to build MDLs describing non-pageable memory. Despite the name, the buffer described by the MDL Read more
14
FebDiagnosed yet another crash today that is likely due to the usage of IoBuildDeviceIoControlRequest. Long ago I was burned by this API and vowed to never use it again, but Read more
14
JulI found myself in a situation this week where I really wanted to call the API SeTokenIsAdmin. I vaguely remembered some issues around this API, and Googling quickly brought up Read more
18
MayIn case you’ve missed it, there are tons of changes going on under the covers in WinDbg. There is a fundamental paradigm shift going on in terms of how WinDbg Read more
07
AprTL;DR: Don’t waste your time like we did – 1394 boot debugging no longer works on the latest builds on Windows 10. As you might already be aware, native 1394 kernel Read more
17
FebYet another interesting case lands on our doorstep thanks to NTDEV (original post here). I firmly believe that you have zero chance in diagnosing a non-trivial crash if you don’t Read more
26
Aug[Last updated 31 Aug 2016, 16:11 Eastern time] Update: As of 31 August 2016, we have verified that RS1 symbols are now present and indexed on the MSFT Symbol Server. Yay! Read more
What’s New at OSR
FESF for Linux is Now Shipping!
OSR's Framework for building transparent per-file encryption solutions now supports Linux!
Read More..
Join the OSR Hints and Tips Email List
Want to receive regular technical hints, tips, and notifications of new tech blog postings from OSR? Join our Hints and Tips list!
To join the list just send a blank email to join-osrhints@lists.osr.com.
Upcoming Seminars
Kernel Debugging & Crash Analysis
**Canceled due to impact of COVID-19**
Course Outline..
Developing File System Minifilters
15-19 June 2020, ONLINE ONLY
Course Outline..
Writing WDF Drivers I: Core Concepts
22-26 June 2020, ONLINE ONLY
Course Outline..
Windows Internals & Software Drivers
28 Sept - 2 Oct, Dulles, VA
Course Outline..
Subscribe to The NT Insider
Signup to get an email whenever a new issue of The NT Insider is available for download. Note: We never share your email address with others, and we won’t spam you. Why would we?
Be sure to check your junk mail folder for your confirmation, which will come from the “mcsignup.com” domain.,
- ObRegisterCallbacks before starting process 6 August 2020 BiboG
- Using Mutex and Events in UMDF 6 August 2020 remyavu10
- Accessing PCI Configuration space information from user mode 6 August 2020 aadit0402
- ObUnregisterCallbacks Fail 5 August 2020 jguo5258
- Digicert revoking kernel code signing certs with expiration after June 30, 2021 5 August 2020 Gabe_Jones
This site uses cookies to improve your experience. Click OK to indicate your consent. OKCookie and Privacy Policy