Tag: winload

• Debugging the Windows 11 Boot Process

  2026-04-23

  Debugging the Windows 11 boot process, walking through the tools and techniques to trace startup from UEFI firmware all the way to the kernel, and the code traced down to the core.

• How Windows DTrace Works Under the Hood: bcdedit → winload.efi → ntoskrnl → dtrace.sys

  2025-12-20

  How Windows DTrace works under the hood, explaining the tracing architecture and how it hooks into the kernel to instrument code, and the bypass logic broken down.