windbg-kernel-irp-lifecycle-triage

Installation
SKILL.md

IRP Lifecycle Triage

Load windbg-diagnostic-method first if it is not already loaded in this conversation, and apply it throughout for evidence ranking, hypothesis testing, confidence calibration, independent review, and report validation. This skill adds the bug-family-specific commands and evidence requirements.

Scope

Investigate I/O Request Packets in a kernel dump or authorized live kernel session. Examples include 0x9F power failures and hangs where progress depends on a driver request. Apply the parameter table for the specific bugcheck subtype rather than assuming every 0x9F identifies the same object.

For 0x9F with P1 equal to 3, P4 is the blocked IRP. Inspect that directly before running a system-wide search.

Workflow

Installs
1
GitHub Stars
472
First Seen
7 days ago