What to debug? Hyper-v worker process User mode debugging (easy). Symbols available. Attack surface: mostly Gen-1 VMs, device emulation, x86 emulation (for MMIO accesses). Debugging options: Attach to running process with WinDbg.