[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M69B3VPC6KZ5PB7QG491HH52":3,"skill-same:01M69B3VPC6KZ5PB7QG491HH52":111},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":28,"publishedAt":54,"linkOnly":55,"markdownContent":56,"markdownBody":57,"frontMatter":58,"refName":59,"commitSha":60,"skillDirectory":61,"forksCount":62,"repositoryHtmlUrl":63,"repositoryHomepageUrl":64,"ownerHtmlUrl":65,"ownerBlogUrl":66,"ownerDescription":67,"updatedAt":68,"install":69,"resources":82},"01M69B3VPC6KZ5PB7QG491HH52","debugview",null,"Sysinternals DebugView CLI (DbgViewCli) for capturing and analyzing usermode and kernel-mode Windows debug output from the command line.\nUSE FOR: capturing OutputDebugString output, kernel DbgPrint\u002FKdPrint capture, boot-time debug logging, remote debug monitoring, filtering debug output by PID or process name, crash dump analysis, automated debug capture with bounded execution.\nDO NOT USE FOR: non-Windows platforms, application-level logging frameworks (log4j, serilog), Azure Monitor or cloud telemetry, ETW tracing (use WPR\u002Fxperf instead), user-mode crash dumps (use WinDbg).\nTriggers: \"debug output\", \"DbgView\", \"DebugView\", \"kernel debug\", \"capture debug logs\", \"boot logging\", \"OutputDebugString\", \"DbgPrint\", \"KdPrint\", \"remote debug monitor\", \"debug capture CLI\".","microsoft\u002Fskills","microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","01M698VYDXZ6JW5WH3CRV650R8","Microsoft","01M69AJYYW4E1RMSYCQDJ4FJSH",3204,"MIT","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fdebugview\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[5,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53],"analyzing","bounded","log4j","mode","remote","PID","debug logs","dump","line","time","azure monitor","command","analysis","cli","monitoring","logs","tracing","logging","monitor","boot","azure","debug","telemetry","windows","kernel","2026-11-10 10:12:30",false,"---\nname: debugview\ndescription: |\n  Sysinternals DebugView CLI (DbgViewCli) for capturing and analyzing usermode and kernel-mode Windows debug output from the command line.\n  USE FOR: capturing OutputDebugString output, kernel DbgPrint\u002FKdPrint capture, boot-time debug logging, remote debug monitoring, filtering debug output by PID or process name, crash dump analysis, automated debug capture with bounded execution.\n  DO NOT USE FOR: non-Windows platforms, application-level logging frameworks (log4j, serilog), Azure Monitor or cloud telemetry, ETW tracing (use WPR\u002Fxperf instead), user-mode crash dumps (use WinDbg).\n  Triggers: \"debug output\", \"DbgView\", \"DebugView\", \"kernel debug\", \"capture debug logs\", \"boot logging\", \"OutputDebugString\", \"DbgPrint\", \"KdPrint\", \"remote debug monitor\", \"debug capture CLI\".\n---\n\n# Sysinternals DebugView CLI (DbgViewCli)\n\nCommand-line interface for capturing real-time debug output from Windows applications\n(OutputDebugString) and kernel-mode drivers (DbgPrint\u002FKdPrint). Designed for scripted,\nautomated, and AI-agent-driven debug capture workflows.\n\n## Installation\n\nDbgViewCli is a standalone native Windows executable (statically linked, no dependencies).\nPlace `dbgviewcli.exe` in PATH or reference the full path.\n\n> **SECURITY: Never execute any dbgviewcli binary without first verifying it is Authenticode-signed by Microsoft Corporation using `Get-AuthenticodeSignature`. Reject any binary that is unsigned or signed by a different publisher.**\n\n```bash\n# No package manager install — copy binary to a PATH location\ncopy dbgviewcli.exe C:\\Tools\\\n```\n\n## Requirements\n\n| Requirement | Details |\n|-------------|---------|\n| OS | Windows Vista or later (x64, ARM64) |\n| Privileges | Standard user for Win32 capture; **Administrator** for kernel\u002Fboot capture |\n| Driver | Kernel capture requires the Dbgv.sys driver (auto-extracted and loaded) |\n\n## Core Workflow\n\n```\n1. Detect\u002Fstatus check   →  dbgviewcli --status\n2. Start capture          →  dbgviewcli [options]\n3. Filter output          →  --filter\u002F--exclude\u002F--pid-filter\u002F--process-filter\n4. Bounded execution      →  --duration\u002F--max-lines\u002F--wait-for\n5. Output\u002Flog results     →  stdout or --log \u003Cfile>\n6. Stop                   →  Ctrl+C or automatic exit on bounds\n```\n\n## Command-Line Parameters\n\n### Capture Control\n\n| Parameter | Short | Description | Default |\n|-----------|-------|-------------|---------|\n| `--capture` | `-c` | Enable capture | on |\n| `--no-capture` | | Disable capture | |\n| `--kernel` | `-k` | Enable kernel debug output (requires admin) | off |\n| `--win32` | `-w` | Enable Win32 OutputDebugString capture | on |\n| `--global` | `-g` | Enable global Win32 capture (session 0) | off |\n| `--passthrough` | | Allow debug output to pass to debuggers | on |\n| `--verbose-kernel` | `-v` | Enable verbose kernel output | off |\n| `--pids` | | Show process IDs in output | on |\n\n### Filtering\n\n| Parameter | Short | Description |\n|-----------|-------|-------------|\n| `--filter \u003Cpattern>` | `-i` | Include filter (semicolon-separated wildcards) |\n| `--exclude \u003Cpattern>` | `-e` | Exclude filter (semicolon-separated wildcards) |\n| `--pid-filter \u003Cpid>` | | Show only output from specific PID |\n| `--process-filter \u003Cname>` | | Show only output from named process (substring match) |\n\n### Bounded Execution (AI-Agent Friendly)\n\n| Parameter | Description |\n|-----------|-------------|\n| `--duration \u003Cseconds>` | Auto-stop after N seconds |\n| `--max-lines \u003CN>` | Auto-stop after N lines captured |\n| `--wait-for \u003Cpattern>` | Capture until pattern matches, then exit |\n| `--tail \u003CN>` | Buffer last N lines, flush on exit |\n| `--no-banner` | Suppress version banner (clean for piped output) |\n| `--status` | Print machine-readable status and exit |\n\n### Time Display\n\n| Parameter | Description |\n|-----------|-------------|\n| `--elapsed` | Elapsed time since start (default) |\n| `--clock` | Wall-clock time HH:MM:SS |\n| `--clock-ms` | Wall-clock with milliseconds HH:MM:SS.mmm |\n\n### Output Format\n\n| Parameter | Description |\n|-----------|-------------|\n| `--format text` | Tab-separated text (default) |\n| `--format csv` | Comma-separated values |\n| `--format xml` | XML elements |\n\n### Logging\n\n| Parameter | Description |\n|-----------|-------------|\n| `--log \u003Cfile>` | Log output to file |\n| `--log-append` | Append to existing log |\n| `--log-limit \u003CMB>` | Max log file size in MB |\n| `--log-wrap` | Wrap log when full |\n| `--log-daily` | New log file each day |\n\n### Boot Logging (Requires Admin)\n\n| Parameter | Description |\n|-----------|-------------|\n| `--boot-enable` | Enable boot-time kernel debug logging |\n| `--boot-disable` | Disable boot-time logging |\n| `--boot-status` | Show boot logging status and exit |\n\n### Remote Monitoring\n\n| Parameter | Description |\n|-----------|-------------|\n| `--connect \u003Ccomputer>` | Connect to remote DbgView instance |\n| `--disconnect` | Disconnect from remote |\n\n### Crash Dump & File Operations\n\n| Parameter | Description |\n|-----------|-------------|\n| `--crashdump \u003Cfile>` | Analyze crash dump for debug output |\n| `--load \u003Cfile>` | Load saved log file |\n| `--save \u003Cfile>` | Save captured output on exit |\n\n### Runtime Control (Inter-Process)\n\n| Parameter | Description |\n|-----------|-------------|\n| `--pause` | Pause a running DbgViewCli instance via named event |\n| `--resume` | Resume a paused DbgViewCli instance |\n| `--stop` | Stop a running DbgViewCli instance gracefully |\n\n### Miscellaneous\n\n| Parameter | Short | Description |\n|-----------|-------|-------------|\n| `--quit` | `-q` | Terminate running GUI DbgView instance |\n| `--accepteula` | | Accept the EULA (writes registry key, skips prompt) |\n| `--version` | | Show version and exit |\n| `--help` | `-?` | Show help |\n\n## Usage Examples\n\n### Basic Win32 Capture (bounded)\n\n```bash\n# Capture for 30 seconds, no banner, output as text\ndbgviewcli --no-banner --duration 30\n\n# Capture until a specific error appears\ndbgviewcli --no-banner --wait-for \"*ERROR*\" --max-lines 10000\n```\n\n### Kernel Debug Capture (requires admin)\n\n```bash\n# Run as Administrator\ndbgviewcli --kernel --no-banner --duration 60 --format csv --log kernel_debug.csv\n```\n\n### Process-Specific Filtering\n\n```bash\n# Filter by PID\ndbgviewcli --no-banner --pid-filter 1234 --duration 10\n\n# Filter by process name\ndbgviewcli --no-banner --process-filter \"myapp.exe\" --max-lines 500\n```\n\n### Pattern-Based Filtering\n\n```bash\n# Include only lines matching pattern\ndbgviewcli --no-banner --filter \"MyDriver*\" --exclude \"verbose*\"\n```\n\n### Tail Mode (recent context)\n\n```bash\n# Capture but only output last 50 lines on exit\ndbgviewcli --no-banner --tail 50 --duration 30\n```\n\n### Status Check (machine-readable)\n\n```bash\ndbgviewcli --status\n# Output:\n# running=true\n# paused=false\n# elevated=true\n```\n\n### Boot Logging\n\n```bash\n# Enable (requires admin, persists across reboot)\ndbgviewcli --boot-enable\n\n# Check status\ndbgviewcli --boot-status\n\n# Disable\ndbgviewcli --boot-disable\n```\n\n### Remote Monitoring\n\n```bash\ndbgviewcli --connect SERVER01 --no-banner --duration 60\n```\n\n### Runtime Control (Pause\u002FResume\u002FStop)\n\n```bash\n# Pause a running instance from another terminal\ndbgviewcli --pause\n\n# Resume the paused instance\ndbgviewcli --resume\n\n# Gracefully stop a running instance\ndbgviewcli --stop\n```\n\n### EULA Acceptance (Unattended)\n\n```bash\n# Accept EULA non-interactively for automated\u002Fscripted deployments\ndbgviewcli --accepteula --no-banner --duration 30\n```\n\n## Architecture\n\n| Module | File | Purpose |\n|--------|------|---------|\n| Main | `dbgviewcli.c` | Entry point, arg parsing, capture loop, Ctrl+C handler |\n| Capture | `cli_capture.c` | DBWIN shared memory, kernel driver read |\n| Driver | `cli_driver.c` | Kernel driver load\u002Funload, privilege elevation |\n| Filter | `cli_filter.c` | Wildcard include\u002Fexclude matching |\n| Output | `cli_output.c` | Console emit, log files, CSV\u002FXML\u002Ftext formats |\n| Boot Log | `cli_bootlog.c` | Registry config for boot-time driver loading |\n| Remote | `cli_remote.c` | TCP socket connect\u002Fread for remote monitoring |\n\n## Key Design Decisions\n\n1. **Static CRT linking** — No DLL dependencies, runs on any Windows system\n2. **stdout\u002Fstderr separation** — Debug output → stdout; errors\u002Fstatus → stderr\n3. **Bounded execution** — `--duration`, `--max-lines`, `--wait-for` ensure guaranteed exit for automation\n4. **Clean output** — `--no-banner` suppresses noise for pipe\u002Fagent consumption\n5. **Machine-readable status** — `--status` outputs key=value pairs for programmatic checks\n6. **Graceful shutdown** — `SetConsoleCtrlHandler` ensures clean driver unload on Ctrl+C\n\n## Best Practices\n\n1. **Always use `--no-banner` for scripted\u002Fautomated use.** Banner text pollutes structured output and confuses parsers.\n2. **Always bound execution** with `--duration`, `--max-lines`, or `--wait-for`. Unbounded capture will run indefinitely.\n3. **Check status before capture** — Use `--status` to detect if another instance is already running.\n4. **Use `--format csv` or `--format xml`** when output will be parsed programmatically.\n5. **Prefer `--pid-filter` or `--process-filter`** over broad capture to reduce noise.\n6. **Run as Administrator only when needed** — kernel and boot logging require elevation; Win32 capture does not.\n7. **Combine bounds for safety** — Use `--duration 60 --max-lines 10000` together so whichever triggers first wins.\n8. **Use `--tail`** for \"what just happened\" queries instead of capturing full history.\n\n## Bundled Resources\n\n| Type | File | Purpose |\n|------|------|---------|\n| Script | `scripts\u002Fdetect-dbgview.ps1` | Locate dbgviewcli.exe on PATH or common directories |\n| Script | `scripts\u002Fcapture-wrapper.ps1` | Safe bounded capture with parameter validation |\n| Script | `scripts\u002Fboot-logging-workflow.ps1` | End-to-end boot logging lifecycle management |\n| Reference | `references\u002Fdriver-ioctls.md` | Kernel driver IOCTL codes and buffer structures |\n| Reference | `references\u002Foutput-formats.md` | Text\u002FCSV\u002FXML output format specifications |\n| Reference | `references\u002Fremote-protocol.md` | TCP remote monitoring wire protocol |\n\n## Troubleshooting\n\n| Issue | Resolution |\n|-------|-----------|\n| \"Access denied\" on kernel capture | Run as Administrator |\n| No output from Win32 capture | Verify target app uses `OutputDebugString`; check no debugger is attached |\n| Another instance running | Use `--status` to check; use `--quit` to terminate existing GUI instance |\n| Boot logging not capturing | Ensure `--boot-enable` was run as admin; driver must be in System32\\Drivers |\n| Remote connection fails | Verify target has DbgView running with remote enabled on ports 2020-2030 |\n","# Sysinternals DebugView CLI (DbgViewCli)\n\nCommand-line interface for capturing real-time debug output from Windows applications\n(OutputDebugString) and kernel-mode drivers (DbgPrint\u002FKdPrint). Designed for scripted,\nautomated, and AI-agent-driven debug capture workflows.\n\n## Installation\n\nDbgViewCli is a standalone native Windows executable (statically linked, no dependencies).\nPlace `dbgviewcli.exe` in PATH or reference the full path.\n\n> **SECURITY: Never execute any dbgviewcli binary without first verifying it is Authenticode-signed by Microsoft Corporation using `Get-AuthenticodeSignature`. Reject any binary that is unsigned or signed by a different publisher.**\n\n```bash\n# No package manager install — copy binary to a PATH location\ncopy dbgviewcli.exe C:\\Tools\\\n```\n\n## Requirements\n\n| Requirement | Details |\n|-------------|---------|\n| OS | Windows Vista or later (x64, ARM64) |\n| Privileges | Standard user for Win32 capture; **Administrator** for kernel\u002Fboot capture |\n| Driver | Kernel capture requires the Dbgv.sys driver (auto-extracted and loaded) |\n\n## Core Workflow\n\n```\n1. Detect\u002Fstatus check   →  dbgviewcli --status\n2. Start capture          →  dbgviewcli [options]\n3. Filter output          →  --filter\u002F--exclude\u002F--pid-filter\u002F--process-filter\n4. Bounded execution      →  --duration\u002F--max-lines\u002F--wait-for\n5. Output\u002Flog results     →  stdout or --log \u003Cfile>\n6. Stop                   →  Ctrl+C or automatic exit on bounds\n```\n\n## Command-Line Parameters\n\n### Capture Control\n\n| Parameter | Short | Description | Default |\n|-----------|-------|-------------|---------|\n| `--capture` | `-c` | Enable capture | on |\n| `--no-capture` | | Disable capture | |\n| `--kernel` | `-k` | Enable kernel debug output (requires admin) | off |\n| `--win32` | `-w` | Enable Win32 OutputDebugString capture | on |\n| `--global` | `-g` | Enable global Win32 capture (session 0) | off |\n| `--passthrough` | | Allow debug output to pass to debuggers | on |\n| `--verbose-kernel` | `-v` | Enable verbose kernel output | off |\n| `--pids` | | Show process IDs in output | on |\n\n### Filtering\n\n| Parameter | Short | Description |\n|-----------|-------|-------------|\n| `--filter \u003Cpattern>` | `-i` | Include filter (semicolon-separated wildcards) |\n| `--exclude \u003Cpattern>` | `-e` | Exclude filter (semicolon-separated wildcards) |\n| `--pid-filter \u003Cpid>` | | Show only output from specific PID |\n| `--process-filter \u003Cname>` | | Show only output from named process (substring match) |\n\n### Bounded Execution (AI-Agent Friendly)\n\n| Parameter | Description |\n|-----------|-------------|\n| `--duration \u003Cseconds>` | Auto-stop after N seconds |\n| `--max-lines \u003CN>` | Auto-stop after N lines captured |\n| `--wait-for \u003Cpattern>` | Capture until pattern matches, then exit |\n| `--tail \u003CN>` | Buffer last N lines, flush on exit |\n| `--no-banner` | Suppress version banner (clean for piped output) |\n| `--status` | Print machine-readable status and exit |\n\n### Time Display\n\n| Parameter | Description |\n|-----------|-------------|\n| `--elapsed` | Elapsed time since start (default) |\n| `--clock` | Wall-clock time HH:MM:SS |\n| `--clock-ms` | Wall-clock with milliseconds HH:MM:SS.mmm |\n\n### Output Format\n\n| Parameter | Description |\n|-----------|-------------|\n| `--format text` | Tab-separated text (default) |\n| `--format csv` | Comma-separated values |\n| `--format xml` | XML elements |\n\n### Logging\n\n| Parameter | Description |\n|-----------|-------------|\n| `--log \u003Cfile>` | Log output to file |\n| `--log-append` | Append to existing log |\n| `--log-limit \u003CMB>` | Max log file size in MB |\n| `--log-wrap` | Wrap log when full |\n| `--log-daily` | New log file each day |\n\n### Boot Logging (Requires Admin)\n\n| Parameter | Description |\n|-----------|-------------|\n| `--boot-enable` | Enable boot-time kernel debug logging |\n| `--boot-disable` | Disable boot-time logging |\n| `--boot-status` | Show boot logging status and exit |\n\n### Remote Monitoring\n\n| Parameter | Description |\n|-----------|-------------|\n| `--connect \u003Ccomputer>` | Connect to remote DbgView instance |\n| `--disconnect` | Disconnect from remote |\n\n### Crash Dump & File Operations\n\n| Parameter | Description |\n|-----------|-------------|\n| `--crashdump \u003Cfile>` | Analyze crash dump for debug output |\n| `--load \u003Cfile>` | Load saved log file |\n| `--save \u003Cfile>` | Save captured output on exit |\n\n### Runtime Control (Inter-Process)\n\n| Parameter | Description |\n|-----------|-------------|\n| `--pause` | Pause a running DbgViewCli instance via named event |\n| `--resume` | Resume a paused DbgViewCli instance |\n| `--stop` | Stop a running DbgViewCli instance gracefully |\n\n### Miscellaneous\n\n| Parameter | Short | Description |\n|-----------|-------|-------------|\n| `--quit` | `-q` | Terminate running GUI DbgView instance |\n| `--accepteula` | | Accept the EULA (writes registry key, skips prompt) |\n| `--version` | | Show version and exit |\n| `--help` | `-?` | Show help |\n\n## Usage Examples\n\n### Basic Win32 Capture (bounded)\n\n```bash\n# Capture for 30 seconds, no banner, output as text\ndbgviewcli --no-banner --duration 30\n\n# Capture until a specific error appears\ndbgviewcli --no-banner --wait-for \"*ERROR*\" --max-lines 10000\n```\n\n### Kernel Debug Capture (requires admin)\n\n```bash\n# Run as Administrator\ndbgviewcli --kernel --no-banner --duration 60 --format csv --log kernel_debug.csv\n```\n\n### Process-Specific Filtering\n\n```bash\n# Filter by PID\ndbgviewcli --no-banner --pid-filter 1234 --duration 10\n\n# Filter by process name\ndbgviewcli --no-banner --process-filter \"myapp.exe\" --max-lines 500\n```\n\n### Pattern-Based Filtering\n\n```bash\n# Include only lines matching pattern\ndbgviewcli --no-banner --filter \"MyDriver*\" --exclude \"verbose*\"\n```\n\n### Tail Mode (recent context)\n\n```bash\n# Capture but only output last 50 lines on exit\ndbgviewcli --no-banner --tail 50 --duration 30\n```\n\n### Status Check (machine-readable)\n\n```bash\ndbgviewcli --status\n# Output:\n# running=true\n# paused=false\n# elevated=true\n```\n\n### Boot Logging\n\n```bash\n# Enable (requires admin, persists across reboot)\ndbgviewcli --boot-enable\n\n# Check status\ndbgviewcli --boot-status\n\n# Disable\ndbgviewcli --boot-disable\n```\n\n### Remote Monitoring\n\n```bash\ndbgviewcli --connect SERVER01 --no-banner --duration 60\n```\n\n### Runtime Control (Pause\u002FResume\u002FStop)\n\n```bash\n# Pause a running instance from another terminal\ndbgviewcli --pause\n\n# Resume the paused instance\ndbgviewcli --resume\n\n# Gracefully stop a running instance\ndbgviewcli --stop\n```\n\n### EULA Acceptance (Unattended)\n\n```bash\n# Accept EULA non-interactively for automated\u002Fscripted deployments\ndbgviewcli --accepteula --no-banner --duration 30\n```\n\n## Architecture\n\n| Module | File | Purpose |\n|--------|------|---------|\n| Main | `dbgviewcli.c` | Entry point, arg parsing, capture loop, Ctrl+C handler |\n| Capture | `cli_capture.c` | DBWIN shared memory, kernel driver read |\n| Driver | `cli_driver.c` | Kernel driver load\u002Funload, privilege elevation |\n| Filter | `cli_filter.c` | Wildcard include\u002Fexclude matching |\n| Output | `cli_output.c` | Console emit, log files, CSV\u002FXML\u002Ftext formats |\n| Boot Log | `cli_bootlog.c` | Registry config for boot-time driver loading |\n| Remote | `cli_remote.c` | TCP socket connect\u002Fread for remote monitoring |\n\n## Key Design Decisions\n\n1. **Static CRT linking** — No DLL dependencies, runs on any Windows system\n2. **stdout\u002Fstderr separation** — Debug output → stdout; errors\u002Fstatus → stderr\n3. **Bounded execution** — `--duration`, `--max-lines`, `--wait-for` ensure guaranteed exit for automation\n4. **Clean output** — `--no-banner` suppresses noise for pipe\u002Fagent consumption\n5. **Machine-readable status** — `--status` outputs key=value pairs for programmatic checks\n6. **Graceful shutdown** — `SetConsoleCtrlHandler` ensures clean driver unload on Ctrl+C\n\n## Best Practices\n\n1. **Always use `--no-banner` for scripted\u002Fautomated use.** Banner text pollutes structured output and confuses parsers.\n2. **Always bound execution** with `--duration`, `--max-lines`, or `--wait-for`. Unbounded capture will run indefinitely.\n3. **Check status before capture** — Use `--status` to detect if another instance is already running.\n4. **Use `--format csv` or `--format xml`** when output will be parsed programmatically.\n5. **Prefer `--pid-filter` or `--process-filter`** over broad capture to reduce noise.\n6. **Run as Administrator only when needed** — kernel and boot logging require elevation; Win32 capture does not.\n7. **Combine bounds for safety** — Use `--duration 60 --max-lines 10000` together so whichever triggers first wins.\n8. **Use `--tail`** for \"what just happened\" queries instead of capturing full history.\n\n## Bundled Resources\n\n| Type | File | Purpose |\n|------|------|---------|\n| Script | `scripts\u002Fdetect-dbgview.ps1` | Locate dbgviewcli.exe on PATH or common directories |\n| Script | `scripts\u002Fcapture-wrapper.ps1` | Safe bounded capture with parameter validation |\n| Script | `scripts\u002Fboot-logging-workflow.ps1` | End-to-end boot logging lifecycle management |\n| Reference | `references\u002Fdriver-ioctls.md` | Kernel driver IOCTL codes and buffer structures |\n| Reference | `references\u002Foutput-formats.md` | Text\u002FCSV\u002FXML output format specifications |\n| Reference | `references\u002Fremote-protocol.md` | TCP remote monitoring wire protocol |\n\n## Troubleshooting\n\n| Issue | Resolution |\n|-------|-----------|\n| \"Access denied\" on kernel capture | Run as Administrator |\n| No output from Win32 capture | Verify target app uses `OutputDebugString`; check no debugger is attached |\n| Another instance running | Use `--status` to check; use `--quit` to terminate existing GUI instance |\n| Boot logging not capturing | Ensure `--boot-enable` was run as admin; driver must be in System32\\Drivers |\n| Remote connection fails | Verify target has DbgView running with remote enabled on ports 2020-2030 |\n",{"name":5,"description":7},"main","3f5b461b2314e01c400564051e92469114c5b68f",".github\u002Fskills\u002Fdebugview",368,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills","https:\u002F\u002Fmicrosoft.github.io\u002Fskills\u002F","https:\u002F\u002Fgithub.com\u002Fmicrosoft","https:\u002F\u002Fopensource.microsoft.com","Open source projects and samples from Microsoft","2026-11-14 06:48:25",{"source":8,"skillName":5,"commands":70,"prompt":80,"zipAvailable":81},[71,74,77],{"tool":72,"command":73},"npx","npx skills add microsoft\u002Fskills --skill debugview",{"tool":75,"command":76},"bunx","bunx skills add microsoft\u002Fskills --skill debugview",{"tool":78,"command":79},"pnpm","pnpm dlx skills add microsoft\u002Fskills --skill debugview","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fdebugview\u002FSKILL.md",true,[83,89,93,97,103,107],{"path":84,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":87,"sourceHtmlUrl":88},"references\u002Fdriver-ioctls.md","REFERENCE","参考文档",5969,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fdebugview\u002Freferences\u002Fdriver-ioctls.md",{"path":90,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":91,"sourceHtmlUrl":92},"references\u002Foutput-formats.md",4116,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fdebugview\u002Freferences\u002Foutput-formats.md",{"path":94,"resourceType":85,"resourceTypeDesc":86,"sizeBytes":95,"sourceHtmlUrl":96},"references\u002Fremote-protocol.md",5704,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fdebugview\u002Freferences\u002Fremote-protocol.md",{"path":98,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":101,"sourceHtmlUrl":102},"scripts\u002Fboot-logging-workflow.ps1","SCRIPT","脚本",3737,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fdebugview\u002Fscripts\u002Fboot-logging-workflow.ps1",{"path":104,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":105,"sourceHtmlUrl":106},"scripts\u002Fcapture-wrapper.ps1",2819,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fdebugview\u002Fscripts\u002Fcapture-wrapper.ps1",{"path":108,"resourceType":99,"resourceTypeDesc":100,"sizeBytes":109,"sourceHtmlUrl":110},"scripts\u002Fdetect-dbgview.ps1",1561,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fdebugview\u002Fscripts\u002Fdetect-dbgview.ps1",[112,137,175,200,221,256],{"skillNo":113,"name":114,"nameZh":6,"description":115,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":116,"categories":117,"keywords":119,"publishedAt":54},"01M69B4JCRQV5SPXAFCKXQRV0H","skill-creator","Guide for creating effective skills for AI coding agents working with Azure SDKs and Microsoft Foundry services. Use when creating new skills or updating existing skills.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fskill-creator\u002FSKILL.md",[118],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[120,121,122,9,123,124,125,49,126,127,128,129,130,131,132,133,134,135,136],"skill creator","creator","coding agents","foundry","microsoft foundry","ai coding agents","services","coding","guide","use","ai coding","with","sdks","for","Existing","when","new",{"skillNo":138,"name":139,"nameZh":6,"description":140,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":141,"categories":142,"keywords":153,"publishedAt":54},"01M69B4FD57V1MYKRWAJJECTZ7","podcast-generation","Generate AI-powered podcast-style audio narratives using Azure OpenAI's GPT Realtime Mini model via WebSocket. Use when building text-to-speech features, audio narrative generation, podcast creation from content, or integrating with Azure OpenAI Realtime API for real audio output. Covers full-stack implementation from React frontend to Python FastAPI backend with WebSocket streaming.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fpodcast-generation\u002FSKILL.md",[143,146,149,152],{"categoryNo":144,"categoryName":145,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000009","前端开发",{"categoryNo":147,"categoryName":148,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":150,"categoryName":151,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000016","图像与多媒体",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[154,155,156,157,158,159,160,49,161,162,163,164,165,166,167,168,169,170,171,172,173,135,174],"podcast generation","podcast","generation","frontend","python","react","realtime","azure openai","generate","streaming","api","Audio","stack","text","model","fastapi","creation","python fastapi","narrative","features","fastapi backend",{"skillNo":176,"name":177,"nameZh":6,"description":178,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":179,"categories":180,"keywords":182,"publishedAt":54},"01M69B4CYPM5SESY5ZWEFDXEQZ","microsoft-docs","Understand Microsoft technologies by querying official documentation. Use whenever the user asks how something works, wants tutorials, needs configuration options, limits, quotas, or best practices for any Microsoft technology (Azure, .NET, M365, Windows, Power Platform, etc.)—even if they don't mention \"docs.\" If the question is about understanding a concept rather than writing code, this is the right skill.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fmicrosoft-docs\u002FSKILL.md",[181],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[183,9,184,185,186,42,187,52,188,189,190,49,191,192,193,129,194,72,195,196,197,198,199,133],"docs","microsoft docs","MCP","writing","mcp server","power platform","official","documentation","learn","best practices","question","power","back","technology","platform","learn mcp","concept",{"skillNo":201,"name":202,"nameZh":6,"description":203,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":204,"categories":205,"keywords":207,"publishedAt":54},"01M69B49C3YPD1ZJ3NC0HPCY58","mcp-builder","Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP), Node\u002FTypeScript (MCP SDK), or C#\u002F.NET (Microsoft MCP SDK).","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fmcp-builder\u002FSKILL.md",[206],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[185,208,209,210,158,211,212,213,9,214,215,168,216,217,128,129,218,219,220,131,133,135],"mcp builder","builder","typescript","llms","sdk","model context protocol","fastmcp","Tools","node","context","integrate","mcp sdk","building mcp servers",{"skillNo":222,"name":223,"nameZh":6,"description":224,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":225,"categories":226,"keywords":237,"publishedAt":54},"01M69B467A7CDMFQ0T6Q0ZA12Q","kql","KQL language expertise for writing correct, efficient Kusto Query Language queries. Covers syntax gotchas, join patterns, dynamic types, datetime pitfalls, regex patterns, serialization, memory management, result-size discipline, and advanced functions (geo, vector, graph). USE THIS SKILL whenever writing, debugging, or reviewing KQL queries — even simple ones — because the gotchas section prevents the most common errors that waste tool calls and cause expensive retry cascades. Trigger on: KQL, Kusto, ADX, Azure Data Explorer, Fabric Real-Time Intelligence, EventHouse, Log Analytics, log analysis, data exploration, time series, anomaly detection, summarize, where clause, join, extend, project, let statement, parse operator, extract function, any mention of pipe-forward query syntax.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fkql\u002FSKILL.md",[227,230,231,234],{"categoryNo":228,"categoryName":229,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":232,"categoryName":233,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000033","数据分析师",{"categoryNo":235,"categoryName":236,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000036","内容创作者",[223,186,238,239,240,49,241,242,243,244,245,246,247,248,38,249,250,251,252,133,253,254,255],"summarize","memory","analytics","vector","time series","tool","discipline","log","geo","exploration","pipe","project","regex","join","datetime","section","anomaly","parse",{"skillNo":257,"name":258,"nameZh":6,"description":259,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":260,"categories":261,"keywords":262,"publishedAt":54},"01M69B44HJQ7897EZ7NE7DWQX3","github-issue-creator","Convert raw notes, error logs, voice dictation, or screenshots into crisp GitHub-flavored markdown issue reports. Use when the user pastes bug info, error messages, or informal descriptions and wants a structured GitHub issue. Supports images\u002FGIFs for visual evidence.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills\u002Fblob\u002Fmain\u002F.github\u002Fskills\u002Fgithub-issue-creator\u002FSKILL.md",[],[263,264,265,266,121,267,268,269,44,270,271,272,129,273,274,275,276,277,278,133,135],"github","github issue creator","github issue","issue","issue creator","screenshots","notes","error messages","messages","convert","evidence","reports","images","info","visual","error"]