The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
I am trying to perform kernel debugging on windows 10 (x64) with unsigned WFP network callout driver, but everytime I restart my system after installing the unsigned driver it goes to startup repair (even before the debugee could get connected )
Kernel debugging is of a Virtual Machine using virtual COM port
1. On the VM (Target Machine) executed following:
bcdedit /debug on
bcdedit /dbgsettings serial debugport:1 baudrate:115200
On restarting, the system goes to startup repair, while windbg remains in 'waiting for debugee to connect..'
With same steps, everything is working as expected when the driver is signed, but I need to test with unsigned driver to save time. The entire process of signing a driver is little time consuming and I may be making multiple iterations and modifications in the driver to test, so testing with unsigned driver will really save a lot of time.
Please advise steps which I am missing or are needed to be performed to achieve Kernel debugging with unsigned driver on windows 10.
|Upcoming OSR Seminars
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
|13-17 May 2024
|1-5 Apr 2024
|Internals & Software Drivers
|11-15 Mar 2024
|Writing WDF Drivers
|20-24 May 2024