microsoft / DTrace-on-Windows

Code for the cross platform, single source, OpenDTrace implementation
Other
485 stars 43 forks source link

SECURE_KERNEL_ERROR Bugcheck when running example #60

Open ntw-au opened 2 weeks ago

ntw-au commented 2 weeks ago

Running the final example in the README immediately produces a SECURE_KERNEL_ERROR bugcheck on Microsoft Windows 11 Enterprise, version 10.0.22631 N/A Build 22631. The other three examples work as expected, as do at least some of those on DTrace on Windows.

Command:

dtrace -Fn "fbt:ntfs::/execname==\"notepad.exe\"/{}"

Result (Windows Event Log):

The computer has rebooted from a bugcheck.
The bugcheck was: 0x0000018b (0x000000000000018c, 0x0000000000001105, 0x0000000000000000, 0x0000000000000000).
A dump was saved in: C:\WINDOWS\Minidump\111324-18640-01.dmp.
Report Id: acefefd8-e0f1-4b9a-96d4-271f913d7156.

I would guess that this is a driver, group policy or Windows Defender conflict of some sort.

What little event logs and dump file I have are available on request, but not over GitHub.