This is a repo for small, useful scripts and extensions

WinDBG Anti-RootKit Extension

Useful scripts for WinDbg using the debugger data model

A console debugger using DbgX and Terminal.Gui

Extract data of TTD trace file to a minidump

FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.

Kernel mode WinDbg extension and PoCs for token privilege investigation.

WinDbg extension written in Rust to dump the CPU / memory state of a running VM

A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.

Rust binding for the dbgeng COM interfaces.

The Windbg extension that implements commands helpful to study Hyper-V on Intel processors.