Windows Kernel Debugging Getting-started Guide
This tutorial is for first-time virtualization debugging users. No driver development or system modification is required—follow the steps below to go from download to attach in about 10 minutes.
Check environment requirements
Windows 10/11 x64; VT-x enabled (Task Manager → Performance → CPU → Virtualization: Enabled); run terminal as administrator.
Tip: The SVM/VT-x option usually lives in BIOS Advanced → CPU Configuration.
Download and install
Get the package from the official download page, extract and run; the driver channel loads on first launch.
Tip: Use an ASCII installation path to avoid false positives from anti-cheat engines.
Login and pick a license
Login with your account; free tier offers 2h per day, paid tiers unlock unlimited time and kernel features.
Tip: Basic UI only is available before login.
Attach the target process
Pick the target in the process list and attach—invisible to the target, no DLL injection.
Tip: If attach fails, verify the target bitness matches the OS.
Set invisible breakpoints
Locate the address in the disassembler and set a software or hardware breakpoint; inspect registers and memory on hit.
Tip: Hardware breakpoints fit scenarios with 0xCC scan detection.
Finish and troubleshoot
Detach or stop when done; if the driver fails to load, check VT-x and antivirus interception.
Tip: Collect logs for crash feedback so issues can be located quickly.