Windows Driver – DebugLogger

DebugLogger is a software driver that logs kernel-mode debug output into a file on Windows. It serves as an open-source alternative to Sysinternals DebugView with limited functionality.

Fast Guide

Example Usage

To install and start the DebugLogger driver, use the following commands:

sc create DebugLogger type= kernel binPath= C:\Users\user\Desktop\DebugLogger.sys
sc start DebugLogger

Key Features

Kernel-mode debug output monitoring: Always enabled.

Save debug output to a file: Always enabled.

Support for ARM64 and x64 Windows 10: Yes.

Open source: Yes.

Installation and Usage

Enable Test Signing:

bcdedit /set testsigning on

Install and Start the Driver:

sc create DebugLogger type= kernel binPath= C:\Users\user\Desktop\DebugLogger.sys
sc start DebugLogger

Uninstall the Driver:

sc stop DebugLogger
sc delete DebugLogger
bcdedit /deletevalue testsigning

Output

All captured debug output is saved in C:\Windows\DebugLogger.log. You can view the contents of this file in real-time using the following command:

powershell Get-Content -Path C:\Windows\DebugLogger.log -Wait

Considerations

Limitations: Does not support user-mode debug output monitoring, boot time monitoring, or remote-system monitoring.

Supported Platforms: Windows 10 on ARM64 or x64.

By using DebugLogger, developers can monitor and save kernel-mode debug output efficiently, especially useful for developing device drivers on uncommon platforms like ARM64.