Use when an app, service, or user-mode driver host TTD recording is available and earlier calls, writes, or lifetimes matter. Not for kernel replay or history from a normal dump.
Install
npx skills add microsoft/win-dev-skills --skill windbg-user-ttd-reverse-debugging-triagenpx skills add microsoft/win-dev-skills --skill windbg-user-ttd-reverse-debugging-triage -a claude-code -gnpx skills add microsoft/win-dev-skills --skill windbg-user-ttd-reverse-debugging-triage -a codex -ggemini skills install https://github.com/microsoft/win-dev-skills.git --path plugins/windbg/skills/windbg-user-ttd-reverse-debugging-triagegh skill install microsoft/win-dev-skills windbg-user-ttd-reverse-debugging-triagegit clone --depth 1 https://github.com/microsoft/win-dev-skills /tmp/microsoft__win-dev-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/microsoft__win-dev-skills/plugins/windbg/skills/windbg-user-ttd-reverse-debugging-triage ~/.claude/skills/windbg-user-ttd-reverse-debugging-triage # Claude Code
cp -R /tmp/microsoft__win-dev-skills/plugins/windbg/skills/windbg-user-ttd-reverse-debugging-triage ~/.agents/skills/windbg-user-ttd-reverse-debugging-triage # Codex, Cursor, Gemini CLI, Copilot, OpenCode