Show Menu
Cheatography

WinDbg Cheat Sheet (DRAFT) by

WinDbg commands, tips and tricks.

This is a draft cheat sheet. It is a work in progress and is not finished yet.

Execution

Command
Descri­ption
g
go (start execution)

Generic Commands

Command
Descri­ption
.sympath srv*
.sympath+
append to existing symbol path
.reload
qd
quit and detach

Symbols

Command
Descri­ption
.sympath
set symbol path
x
examine symbols

Data Types

Command
Descri­ption
dt
data type
 

Breakp­oints

Command
Descri­ption
bu
set breakpoint
bl
breakpoint list
bc *
clear breakpoint

Modules

Command
Descri­ption
lm
list loaded modules

Thread

Command
Descri­ption
~
thread status
~s
set current thread
!thread 0xTHREAD
shows inform­ation about the thread

Process

Command
Descri­ption
!process 0 0
To see a list of all processes
!process 0xPROCESS 2
Shows all the threads in the process

Driver

Command
Descri­ption
!drvobj

Devices

Command
Descri­ption
!devnode
!devstack
 

Memory

Read
Command
Descri­ption
 

Write
Command
Descri­ption

Stack

Command
Descri­ption
k
display stack backtrace

Plugins

analyze
User-Mode
!analyze -v
show verbose
 
Kernel­-Mode
!analyze -v
show verbose
!analyze

Plugin 2