40% Black Friday Cyber Monday November discount! CODE: BF2025

Mastering WinDbg

WinDbg is a powerful Microsoft debugger, able to debug user mode and kernel mode code. This course shows the major aspects of working with WinDbg, in user and kernel mode, with and without source code.

67 Lessons

Lifetime access

$175

or $92 x 2 installments

Trusted by 7,348 students and companies

Pavel Yosifovich

Developer, trainer, author and (sometimes) speaker. Founder of TrainSec academy.

25+ years as Software developer, trainer, consultant, author, and speaker. Co-author of “Windows Internals”. Author of “Windows Kernel Programming”, “Windows 10 System Programming, as well as System and kernel programming courses on PentesterAcademy, and “Windows Internals” series of courses on PluralSight.

Books and publications

Mastering WinDbg Course Contents

Chapters included in this course

Introduction

WinDbg Basics

WinDbg Overview • 6 mins Preview
Debugger Commands • 4 mins
Symbols • 15 mins
Processes and Threads • 5 mins
Stacks • 4 mins
CPU Registers • 11 mins
Calling Convention • 9 mins
Strings • 4 mins
Modules and Symbols • 10 mins
Configure WinDbg
Source Debugging • 3 mins

User Mode Debugging

Starting Debugging • 7 mins
Threads • 28 mins
Processes • 5 mins
Displaying Types • 22 mins
Documentation • 4 mins
Displaying Types Recap • 5 mins
Call Stack • 8 mins
Breakpoints • 29 mins
Return Value • 9 mins
Quick Recap • 7 mins
Modifying Data • 4 mins
Modules • 13 mins
Source Debugging • 17 mins

Kernel Mode Debugging

Introduction • 5 mins
Local Kernel Debugging • 7 mins
Remote Kernel Debugging • 21 mins
Getting a Virtual Machine • 3 mins
Connect to Kernel
Processes and Threads • 38 mins
Process List Head • 4 mins
System Calls • 16 mins
Process Breakpoints • 6 mins
Jobs • 12 mins
Objects • 27 mins
Named Objects • 8 mins
Drivers and Devices • 17 mins
IRPs • 12 mins

Advanced WinDbg

Samples-Debug
Samples-Release
MasteringWinDbg-Source
Exceptions and Events • 4 mins
Exception Demo • 10 mins
Advanced Breakpoints • 9 mins
Expressions • 4 mins
Memory • 6 mins
Child Process Debugging • 7 mins
Debugger Object Model • 13 mins
Debugging Demos • 35 mins

Dump Files

Introduction • 4 mins
Dump Types • 3 mins
User Mode Dumps • 23 mins
Debugging Drivers • 19 mins
Kernel Dumps • 16 mins
Generating Kernel Dump • 11 mins

Debugger Extensions

Extensions Overview • 7 mins
Demo - Mex • 4 mins
Demo - Sos • 14 mins
The Debugger API • 23 mins
Writing an Extension • 36 mins
MasteringWindDbgExt

Windows Architecture Quick Review

Pavel Yosifovich

Developer, trainer, author and (sometimes) speaker. Founder of TrainSec academy.

25+ years as Software developer, trainer, consultant, author, and speaker. Co-author of “Windows Internals”. Author of “Windows Kernel Programming”, “Windows 10 System Programming, as well as System and kernel programming courses on PentesterAcademy, and “Windows Internals” series of courses on PluralSight.

Books and publications

Are you a freelancer or an individual student?

We will love to see how we can help, Contact us to receive more affordable personal pricing.

Master WinDbg

$175 or 2 X $92

WinDbg is a powerful Microsoft debugger, able to debug user mode and kernel mode code. This course shows the major aspects of working with WinDbg, in user and kernel mode, with and without source code.