7 years ago I wrote about Microsoft’s useful Time Travel Debugging (TTD) tool.
A customer had an issue running it recently, as TTDInject.exe was being blocked by the Cylance anti-virus product. It’s doing a “Remote Write PE to Memory” Cylance complained.
While researching TTDInject and it’s parent process, PartnerTTDRecorder_x86_x64, I found out that TTD is now included it the WinDgb Preview release.
That is wonderful news.
Reference(s):
Time Travel Debugging – Overview
Time Travel Debugging – Working with Trace Files