wisefaq.com

Stories, and bit rot, from the IT Support Trenches

image7 years ago I wrote about Microsoft’s useful Time Travel Debugging (TTD) tool.

A customer had an issue running it recently, as TTDInject.exe was being blocked by the Cylance anti-virus product.  It’s doing a “Remote Write PE to Memory” Cylance complained.

While researching TTDInject and it’s parent process, PartnerTTDRecorder_x86_x64, I found out that TTD is now included it the WinDgb Preview release.

That is wonderful news.

Reference(s):
Time Travel Debugging – Overview
Time Travel Debugging – Working with Trace Files