.prefer_dml 1
This modifies many of the built in commands (for example, lm
) to display DML output which allows you to click links instead of running commands. Pretty handy...
.reload /f /o file.dll
(the /o
will overwrite the current copy of the symbol you have)
.enable_unicode 1
//Switches the debugger to default to Unicode for strings since all the Windows components use Unicode internally, this is pretty handy.
.ignore_missing_pages 1
//If you do a lot of kernel dump analysis, you will see a lot of errors regarding memory being paged out. This command will tell the debugger to stop throwing this warning.
alias alias alias...
Save yourself some time in the debugger. Here are some of mine:
aS !p !process;
aS !t !thread;
aS .f .frame;
aS .p .process /p /r
aS .t .thread /p /r
aS dv dv /V /i /t //make dv do your favorite options by default
aS f !process 0 0 //f for find, e.g. f explorer.exe