Skip to content

Instantly share code, notes, and snippets.

View ergot86's full-sized avatar

Daniel Fernandez Kuehr ergot86

View GitHub Profile

What to debug?

Hyper-v worker process

  • User mode debugging (easy).
  • Symbols available.
  • Attack surface: mostly Gen-1 VMs, device emulation, x86 emulation (for MMIO accesses).

Debugging options:

  1. Attach to running process with WinDbg.