|
|
#3
09-20-2012, 23:12
|
||||
|
||||
|
IDA won't do kernel debugging, although Bochs that comes with it may (I don't know). Best is probably windbg. Make sure you keep a map/pdb of your driver and have a read here :
http://msdn.microsoft.com/en-us/library/windows/hardware/ff553382%28v=vs.85%29.aspx Git 
|
| The Following User Gave Reputation+1 to Git For This Useful Post: | ||
chessgod101 (09-21-2012) | ||
| The Following User Says Thank You to Git For This Useful Post: | ||
nimaarek (09-20-2017) | ||
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Hades:Windows kernel driver lets reverse engineers monitor user and kernel mode code | sh3dow | Source Code | 0 | 05-12-2016 03:15 |
| How to pass the large data in kernel mode to user mode? | benina | General Discussion | 3 | 03-06-2010 04:50 |
| Kernel-Mode GUI!? (like SoftIce) | Cobi | General Discussion | 1 | 01-21-2005 02:24 |
| Suspending Kernel Mode Threads... | omidgl | General Discussion | 10 | 01-17-2005 17:56 |
| Kernel Mode Driver for NT | SPeY | General Discussion | 12 | 04-22-2004 15:34 |
Threaded Mode