7 years ago I wrote about Microsoft’s useful Time Travel Debugging (TTD) tool.
A customer had an issue running it recently, as TTDInject.exe
was being blocked by the Cylance anti-virus product. It’s doing a “Remote Write PE to Memory” Cylance complained.
While researching TTDInject
and it’s parent process, PartnerTTDRecorder_x86_x64
, I found out that TTD is now included it the WinDgb Preview release.
That is wonderful news.
Reference(s):
Time Travel Debugging – Overview
Time Travel Debugging – Working with Trace Files