Description
https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/object-reference-tracing
There's a simple set of functions, types, and variables that the !obtrace debugger extension needs.
Additionally we should also implement !obtrace for kdbg.
Implementing ObReferenceObjectWithTag and friends could also be useful, as it makes it easier to filter out noise.
Attachments
Issue Links
- blocks
-
CORE-17140 rapps.exe is a zombie
- Untriaged