BugcheckAnalysis

final class ntoseye.BugcheckAnalysis

Subclass of BaseRecord.

A decoded bugcheck (BSOD): the code resolved to a name and per-parameter descriptions, the responsible driver (from the dump record, the KD stream or the fault site), and the faulting instruction if ntoseye identified it. One source of truth for bugcheck analysis.

property args: list[BugcheckArg]

The four bugcheck parameters, each with its meaning for this code.

property code: int

The bugcheck code.

property code_hex: str

The code as zero-padded hex text (0x0000000a).

property description: str | None

What the bugcheck means. None if the code has no description.

property driver: str | None

The responsible driver, from the dump record or from the fault site.

property fault: BugcheckFault | None

The faulting instruction. None if ntoseye did not identify one.

property name: str

The symbolic name (IRQL_NOT_LESS_OR_EQUAL).

property source: str | None

Where the data came from when not nt!KiBugCheckData’s own slots: "dump header" for a dump’s recorded bugcheck, or a note that nt!KiBugCheckData held a pointer to the real slots. None when it was read from those slots, or the target reported the bugcheck itself.

property trap_frames: list[BugcheckTrapFrame]

The trap frames that the parameters point to.