Kernel Tracing HTTP.SYS with BinNavi 3.0 from sys drivers Watch Video
Preview(s): Play Video: (Note: The default playback of the video is HD VERSION. If your browser is buffering the video slowly, please play the REGULAR MP4 VERSION or Open The Video below for better experience. Thank you!)
Your browser does not support playing the video.Please download the video!
Description: This is a first-cut (no editing or captions) video example of using BinNavi 3.0 with VirtualKD to debug kernel mode drivers.nnIn this video I attach to the process and start tracing.nnFirst I trace while IIS is idle and mark all of the blocks hit in that trace as idle background noise.Then those breakpoints are removed and only new breakpoints are recorded when processing a get request.This allows us to isolate only the functions used in processing a simple anonymous GET request.nnNext we wi