DBG211-1 - Windows Debugging and Troubleshooting Essentials

This seminar provides a fast but comprehensive introduction to the use of the Windows Debugging Tools, Windows Performance Toolkit, and other tools for "live" kernel mode debugging, memory dump analysis. and performance analysis. 

Level: Intermediate

Application developers, I.T. professionals (system administrators and support personnel), device and platform engineers, system integrators


This seminar provides a one-day "short course" in troubleshooting hangs, crashes, and performance problems in Windows. Approximately half of the time is spent on performance, resource usage, and "bottleneck" analysis using the Windows Performance Toolkit. Most of the rest is spent on the use of the Windows Debugging Tools (WinDbg) to analyze operating system crashes (blue screens) and hangs. The presentation includes discussion of the Windows operating system principles that are at work in each problem scenario. 

  • Windows Performance Toolkit introduction
  • Collecting and analyzing WPT traces
  • What to trace? – understanding performance issues 
  • Identifying memory and other resource constraints
  • Using trace events 
  • Windows Debugging Tools introduction
  • Types of system failures
  • Memory dump analysis
  • Interpreting stack traces and disassembly code
  • Analyzing system "hangs" with live kernel debugging

This seminar builds on, and does not repeat, material presented in our Windows Internals seminars. All attendees must therefore have attended one of our Windows Internals seminars, or have equivalent experience. 

Operating systems supported:

This seminar primarily addresses Windows 7 through Windows 10 and Windows Server 2012 R2. Most of the material is applicable to earlier versions of Windows. Earlier versions can be specifically addressed upon request. We will focus on 64-bit systems (x64)

Durations and formats: 1 day lecture only

Due to the short time format, this seminar is not offered with labs. Key points throughout the session will be demonstrated on the instructor's system.