Tools
Faultmon
Faultmon is a simple command-line utility that monitors exceptions within a process. Whereas a conventional debugger will display an alert and freeze execution when an exception occurs, Faultmon writes basic contextual information to stdout and allows execution to continue automatically (although it can be made to pause as well). Faultmon is useful for getting additional troubleshooting information from another user, and in conjunction with run-time vulnerability discovery. To use, run Faultmon with either the command line for a new process to create, or the process ID of an existing process to debug. Some command line switches are supported; see the "usage" text for more information.
[Download v1.02]
Additional Information
11/29/2006: v1.02 UPDATE
Faultmon v1.02 now accepts the Process ID of a process to debug, or application to execute, anywhere within its command line, allowing it to be used in conjunction with the "Debugger" registry value of the "Image File Execution Options" key. It also features a new /B command line switch that causes breakpoints to be displayed like other exceptions. Used with /P /P, this provides a convenient way to pause execution of a program or its child processes as soon as they launch.
[Download v1.02]
Additional Information
11/29/2006: v1.02 UPDATE
Faultmon v1.02 now accepts the Process ID of a process to debug, or application to execute, anywhere within its command line, allowing it to be used in conjunction with the "Debugger" registry value of the "Image File Execution Options" key. It also features a new /B command line switch that causes breakpoints to be displayed like other exceptions. Used with /P /P, this provides a convenient way to pause execution of a program or its child processes as soon as they launch.
