microsoft/win-dev-skills

windbg-kernel-bugcheck-triage

Use when a kernel dump reports a Windows bugcheck; decode parameters and recover exception or trap context before investigating your driver. Not for user-mode process crashes or blaming a module from its name alone.

Idioma del texto original: inglés

windbg-kernel-irp-lifecycle-triage

Use when kernel evidence shows stalled I/O, a power IRP, or completion/cancellation misuse; inspect request state and driver ownership. Not for interpreting an empty IRP search in a limited dump as proof of healthy I/O.

Idioma del texto original: inglés

windbg-kernel-lock-deadlock-triage

Use when kernel threads block on driver synchronization or Verifier reports a lock-order violation; build an owner/waiter graph. Not for treating every watchdog stop as a deadlock or listing every lock type with !locks.

Idioma del texto original: inglés

windbg-kernel-verifier-triage

Use when a kernel dump contains Driver Verifier violations; inspect flags, bugcheck subcodes, and available I/O shadow state. Not for Application Verifier user-mode stops or inferring a violation from enabled flags alone.

Idioma del texto original: inglés

windbg-user-exception-triage

Use when a native C/C++ app, service, or user-mode driver host (including UMDF) crashes with a structured exception in a dump or WinDbg session, including native faults inside managed processes. Not for managed .NET exceptions, WinUI/XAML app errors, or…

Idioma del texto original: inglés

windbg-user-heap-corruption-investigation

Use when an app, service, or user-mode driver host heap fails or Application Verifier detects corruption; inspect history and bounds. Not for kernel pool corruption or ordinary OOM.

Idioma del texto original: inglés

windbg-user-mutex-held-across-co-await

Use when app, service, or user-mode driver C++ coroutine code holds a thread-affine lock across suspension and later hangs or fails. Not for all coroutine crashes or choosing lock performance.

Idioma del texto original: inglés

windbg-user-ttd-reverse-debugging-triage

Use when an app, service, or user-mode driver host TTD recording is available and earlier calls, writes, or lifetimes matter. Not for kernel replay or history from a normal dump.

Idioma del texto original: inglés

windbg-user-virtual-memory-exhaustion

Use when a native app, service, or user-mode driver host allocation fails; distinguish VA exhaustion, fragmentation, and commit pressure. Not for managed .NET heap growth, proving a leak from one snapshot, or corruption.

Idioma del texto original: inglés

windbg-user-wait-chain-analysis

Use when an app, service, or user-mode driver host is unresponsive on locks, COM/RPC, I/O, or another process; follow the blocker chain. Not for a crash solely from an exception stack.

Idioma del texto original: inglés

windbg-diagnostic-method

Use with every WinDbg plugin investigation to apply evidence-first reasoning, confidence calibration, contrarian review, structured reporting, and deterministic validation. Not a bug-family-specific triage skill.

Idioma del texto original: inglés

sample-skill

Sample skill used to test the catalog tooling. Use when testing CI. Not for real work.

Idioma del texto original: inglés