snoone questions

snoone answers

• FSCTL_GET_RETRIEVAL_POINTERS failure on very small file on a NT File System
• How to increase breakpoint limit in current WinDbg?
• How do I find a memory mapped file's name in WinDbg?
• How can I dump 32-bit structs in 64-bit WinDbg?
• IDA Pro Windbg Commands do not work
• How to know a pdb file is public or private?
• Livekd documentation and tutorials
• Is there a difference in dt nt!_TEB and dt ntdll!_TEB?
• Quickly detect removal of fixed IDE drive in Windows XP
• how can I find native exceptions in an x64 stack?