DbgKit

DbgKit is a complex piece of software aimed at developers and other users with advanced programming knowledge. It comes in the shape of a dynamic link library and aims to function as a GUI extension for the Windows Debugging tools.

The utility comes with no instructions, documentation or help file of any sorts, meaning users will need to rely on their experience in order to determine how to integrate the DLL file into their debugging tool of choice, be it WinDbg, KD, CDB, NTSD.

DbgKit is meant to provide users with the ability to get a more structured view of the processes that are running on a system, organizing them hierarchically. It features a detailed set of data concerning each detected process.

For each process, DbgKit informs users of the PID value, number of threads, the virtual size and the working set value, the handle count, as well as the full image path.

In the case of ‘Handles’, the tool provides users with information about the entry type and its corresponding granted access, the attributes and other references. For ‘Threads’, users can learn the start address, start and exit times, as well as the elapsed duration. Its state is also visible, along with the wait reason.

Other type of information provided by DbgKit concerns the ‘Performance’ data, ‘Security attributes’, ‘Modules’ and ‘Environment’ variables, and several more, which can come in handy when working with any of the popular Windows debugging tools.