Clik here to view.
A Classic Case of Whodunit
Sometimes we encounter problems that just don't make sense. I don't mean a high powered lawyer talking about Chewbacca, I mean sometimes computers do things that defy logic. The below bugcheck is...
View ArticleClik here to view.
Updated Archive of the Debug Ninja’s Twitter Debug Tips
Every Wednesday (usually) I post a debug tip to our twitter page at https://twitter.com/#!/ntdebugging. This blog is an archive of these tips to allow our readers to find this information easily. I...
View ArticleClik here to view.
LUN Discovery in a Nutshell
The way the disk configuration is determined on a Windows system is by a process called “discovery”. If the disk configuration is ISCSI or Fibre the process is very similar. I will describe the...
View ArticleClik here to view.
For testing purposes only, and other desktop watermarks
Hi all, Matt here again. One of our team’s main functions is to work with our development teams to create hotfixes when customers run into issues that can only be resolved through a code change. The...
View ArticleClik here to view.
Determining The Interrupt Line For A Particular PCI-E Slot
Hi debuggers, this is Graham McIntyre again. These days I’m working more closely with hardware so I thought I’d share some hardware related debugging tips. I recently debugged an issue where a PCI-E...
View ArticleClik here to view.
Bcdedit Tips and Tricks For Debugging Part 1
Hello everyone, my name is Sean Walker, and I am on the Platforms OEM team in Washington. This article is for those people who have had a hard time switching from the old boot.ini configuration to...
View ArticleClik here to view.
Debugging a CLOCK_WATCHDOG_TIMEOUT Bugcheck
Hi debuggers, Andrew Richards here for my first NT Debugging post. I thought I’d share a recent case that used a lot of discovery techniques to uncover the details of what was going on. Most bugchecks...
View ArticleClik here to view.
Call Stacks for Pool Allocations
Hello, it's the Debug Ninja back again for another NtDebugging Blog article. For as long as I can remember user mode debuggers have had an easy way to get call stacks for heap allocations. On more...
View ArticleClik here to view.
Where Did My Disk I/O Go?
Hello, Mr. Ninja back again. I recently discovered that although my team often tracks I/O from the file system through to the disk controller, we have never publicly documented the steps required to...
View ArticleClik here to view.
Fixing an ICorDebugUnmanagedCallback induced hang
Hi debuggers, Andrew Richards here with a NTDebugging post that is a little different to what is usually posted. Instead of talking about debugging, I’m going to talk about an issue I just faced...
View ArticleClik here to view.
My Kernel Debugger Won't Connect
Hello ntdebugging readers, the Debug Ninja is back again with a quick blog this holiday season. I recently encountered a situation where the kernel debugger could not connect to a Windows Server 2008...
View ArticleClik here to view.
Configuring a Hyper-V VM For Kernel Debugging
Yesterday's blog prompted some questions about how to set up a debugger for a Windows OS running in a Hyper-V VM. I was surprised that I wasn't able to find good, publicly available, Microsoft issued...
View ArticleClik here to view.
Stop 0x19 in a Large Pool Allocation
Hello all, Scott Olson here again to share another interesting issue I recently debugged with pool corruption and found that using special pool does not work with large pool allocations (pool...
View ArticleClik here to view.
Identifying Global Atom Table Leaks
Hi, it's the Debug Ninja back again with another debugging adventure. Recently I have encountered several instances where processes fail to initialize, and a review of available resources showed that...
View ArticleClik here to view.
What Should Never Happen... Did
Hi, this is Bob Golding; I wanted to write a blog about an interesting hardware issue I ran into. Hardware problems can be tricky to isolate. I recently came across one that I thought was interesting...
View ArticleClik here to view.
Debugging Backwards: Proving root cause
Matt Burrough here again. On rare occasions when debugging, we'll actually know (or strongly suspect) what the root cause of a problem is at the beginning of our analysis - but we still need to...
View ArticleClik here to view.
How the Clipboard Works, Part 1
Recently I had the opportunity to debug the clipboard in Windows, and I thought I’d share some of the things I learned. The clipboard is one of those parts of Windows that many of us use dozens...
View ArticleClik here to view.
Our Team in Bangalore is Hiring - Windows Server Escalation Engineer
Would you like to join the world’s best and most elite debuggers to enable the success of Microsoft solutions? As a trusted advisor to our top customers you will be working with to the most...
View ArticleClik here to view.
How the Clipboard Works, Part 2
Last time, we discussed how applications place data on the clipboard, and how to access that data using the debugger. Today, we'll take a look at how an application can monitor the clipboard for...
View ArticleClik here to view.
Troubleshooting Memory Leaks With Just a Dump
Hello debuggers, the debug ninja is back again. Sometimes we have a scenario where a process is using a lot of memory, and the only data we are able to get at the moment is a user dump. Ordinarily...
View Article