Questions tagged [livekd]

5 questions
3
votes
2 answers

Livekd documentation and tutorials

I know LiveKd is a tool to create dumps for analysis. Can someone help me with some links that help me learn how to use LiveKd?
Rockstart
  • 2,337
  • 5
  • 30
  • 59
2
votes
1 answer

In Windows, local kernel debugging is disabled by default. Why?

I'm using Windows 10. When you first install Windows, local kernel debugging (windbg -kl) is disabled by default. To enable it, you must run bcdedit -debug on and reboot. (Though, as far as I can tell, Sysinternals LiveKd seems to work fine even…
0
votes
1 answer

In Sysinternals' livekd, how can we find the information associated with a process from its PID?

I want to get information on a process from Sysinternals' livekd using its process ID. How do I do this? The documentation for WinDBG's !process command on MSDN (https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/-process)…
ARV
  • 6,287
  • 11
  • 31
  • 41
0
votes
0 answers

LiveKD is not working anymore under Windows 10?

I'm trying to use Microsoft's "LiveKD" utility. My understanding is that it's an alternative to having to use WinDbg and KD via a serial connection to debug the kernel 'live' (and the system doesn't have to be booted in debug mode). I'm using…
albfrk99
  • 1
  • 2
0
votes
1 answer

Make windbg or kd attached to local kernel behave like system wide strace

I am running Windows 7 on which I want to do kernel debugging and I do not want to mess with boot loader. So I've downloaded LiveKd as suggested here and make it run and seems it is working. If I understand correct it is some kind of read only…
Wakan Tanka
  • 7,542
  • 16
  • 69
  • 122