Kernel debugging with VirtualBox

Instructions

Retrieved from https://www.virtualbox.org/manual/topics/AdvancedTopics.html

Configure VM while being powered off

From a regular command prompt:

set VM_NAME=Win10_22H2
set PATH=%PATH%;C:\Program Files\Oracle\VirtualBox

VBoxManage.exe showvminfo %VM_NAME%
VBoxManage.exe modifyvm %VM_NAME% --paravirt-debug "enabled=1"

You'll also need to disable "Secure Boot" in the VM:

WARNING: Secure boot changes appear to be reset when restoring VM state. I've registered How to persistently disable secure boot? on the issue.

Then reboot.

VM configuration while running

From an admin command prompt within the VM:

bcdedit /dbgsettings net hostip:5.5.5.5 port:50000 key:1.2.3.4
bcdedit /set debug on
bcdedit /set testsigning on

WinDBG connection from host

Enable driver debug logging

Either, break WinDBG execution and send the following command to enable display of debug messages: kd>

ed nt!Kd_IHVDRIVER_Mask 0xffffffff

Or, merge the following IHVDRIVER-debugging.reg file on the target machine:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Debug Print Filter]
"IHVDRIVER"=dword:ffffffff