Monthly Archives: May 2021

When a Time Travel Debugging trace has been captured It can be vary useful to find where in the execution of an application specific strings are generated such as error messages etc. For example if an error message string is … Continue reading →

This script does some basic check for a common API hooking techinque. In a user mode memory dump, Time Travel Debugging Trace, or live user mode debugging session, this script enumerates all modules in the current process, checks every exported … Continue reading →

When debugging sometimes it is useful to understand general flow of the application. In cases where you do not have symbols for the application, and it is not easy to do a runtime analysis, or static analysis of the file … Continue reading →