7 years ago I wrote about Microsoft’s useful Time Travel Debugging (TTD) tool.

A customer had an issue running it recently, as TTDInject.exe was being blocked by the Cylance anti-virus product.  It’s doing a “Remote Write PE to Memory” Cylance complained.

While researching TTDInject and it’s parent process, PartnerTTDRecorder_x86_x64, I found out that TTD is now included it the WinDgb Preview release.

That is wonderful news.

Reference(s):
Time Travel Debugging – Overview
Time Travel Debugging – Working with Trace Files

Related posts:

How to select a good anti-virus product WFH Challenge – Cylance anti-virus vs. Oracle VirtualBox WFH Challenge – Cylance anti-virus vs. Oracle VirtualBox–Round 2

Powered by YARPP.