Skip to content

Latest commit

 

History

History
47 lines (34 loc) · 1.44 KB

README.md

File metadata and controls

47 lines (34 loc) · 1.44 KB

Windows Kernel Development

This repo has my solutions for exercises specified inside the "Windows Kernel Development" book written by Pavel Yosifovich (which is more than recommended :)).

Full Kernel Debugging Environment

Host Machine

  1. Install VS19

  2. Install Windows SDK

  3. Install Windows Driver Kit

  4. Install WinDbg Preview

  5. Download Sysinternals

  6. Download Spectre Mitigation requirements

  7. Download and create VM (I'm using Hyper-V)

Guest Machine

  1. Run the following commands inside the VM:
bcdedit /debug on
bcdedit /dbgsettings serial debugport:1 baudrate:115200
  1. Restart
  2. Create a COM Port
  3. Check if COM Port created using:
Get-VMComPort <VM_NAME>
  1. Enable test signing (for loading unsigned drivers)
bcdedit /set testsigning on
  1. Restart the machine
  2. Enable kernel logging: 7.1. Open registry key HKLM\SYSTEM\CurrentControlSet\Control\Session Manager 7.2. Create new Key - Debug Print Filter 7.3. Create new DWORD value DEFAULT = 0x8
  3. Restart the machine
  4. Open DbgView.exe and set Capture Kernel using Ctrl+K.