Hacking Livestream #28: Windows Kernel Debugging Part I

Artem "honorary_bot" Shishkin is a fan of Windows RE, debugging and low-level stuff. He's been using WinDbg for kernel debugging for several years now for fun, customizing BSODs, building Windows kernel source tree or boot dependencies graph. Sometimes he might also accidentally discover such things as SMEP bypass on Windows 8 or how to disable PatchGuard in runtime. Being a great fan of Intel and specifically VMX technology he maintains his own bicycle debugger based on a bare metal hypervisor.
Twitter handle: https://twitter.com/honorary_bot
Github: https://github.com/honorarybot/

Links from the stream:

Books:
https://www.amazon.com/Windows-Internals-Part-Developer-Reference/dp/0735648735
https://www.amazon.com/Windows-Internals-Part-Developer-Reference/dp/0735665877
https://www.amazon.com/Programming-Microsoft-Windows-Developer-Reference/dp/0735618038
https://www.amazon.com/Developing-Windows%C2%AE-Foundation-Developer-Reference/dp/0735623740

VirtualKD
http://virtualkd.sysprogs.org/

USB 3.0 debugging cable (example):
https://www.datapro.net/products/usb-3-0-super-speed-a-a-debugging-cable.html

Network card IDs for network debugging:
https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/supported-ethernet-nics-for-network-kernel-debugging-in-windows-10

Видео Hacking Livestream #28: Windows Kernel Debugging Part I канала GynvaelEN