Windows Debugger for advanced user-mode and kernel-mode debugging. Located at: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\windbg.exe; C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\windbg.exe; C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\windbg.exe.
windbg windbg Sandbox: execFile · Timeout: 30s
security.execution.command Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | low |
| Disk I/O | low |
Launches a command line through the debugging process; optionally add `-G` to exit the debugger automatically. (Executes an executable under a trusted microsoft signed binary.)
windbg.exe -g {CMD} windbg is a Windows LOLBin. Windows Debugger for advanced user-mode and kernel-mode debugging. Located at: C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\windbg.exe; C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\windbg.exe; C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\windbg.exe.