Windows Blue Screen and Crash Diagnosis
Paste the following prompt into your AI chat to install this skill:
Please follow https://skillhub.cn/install/skillhub.md to install @user_a00de644/windows-bsod-diagnosis.
About this skill
Problem
Windows blue screens, unexpected shutdowns, and systems that fail to wake from sleep leave evidence scattered across Event 41, WER Event 1001, minidumps, WHEA, and LiveKernelEvent. Judging only from one driver or one BugcheckCode is easy to misread, especially with ntoskrnl.exe, win32kfull.sys, or sleep-wake failures.
How It Works
The skill follows the event chain:
- Shutdown localization: scan Event 41, 1074, 6008, 506, and 507, then use BugcheckCode to distinguish BSODs, forced power loss, or sleep anomalies.
- Crash evidence: inspect WER system error reports, minidump listings, WHEA Event 1, and LiveKernelEvent codes such as 0x124, 0x144, and 0x15E.
- Context and drivers: review pre-crash FilterManager, Service Control Manager, NIC driver, and Kernel-PnP 219/411 events, then audit third-party driver dates and filter-driver stack conflicts.
- Special checks: for sleep issues, use powercfg /a and powercfg /lastwake to separate S0/S3 behavior; if win32kfull.sys appears, check GDI object leakage; if root cause remains unclear, request the user's WinDbg fields.
Boundaries
Supports Windows 10/11 only, not Linux/macOS, mobile devices, app-only crashes, or plain performance lag. Event logs, minidumps, and power diagnostics usually need administrator rights; deep WinDbg analysis requires user-supplied IMAGE_NAME, STACK_TEXT, and related evidence.
Use Cases
- BSOD on Windows 11; find driver or hardware cause.
- Sleep wake failure; check S0/S3, wake source, leaks.
- Interpret WinDbg IMAGE_NAME and STACK_TEXT safely.
- Differentiate BSOD, power loss, reboot, log purge.
Best For
- Windows ops: triage BSODs, reboots, sleep failures.
- Systems engineer: audit drivers, filter drivers, WHEA errors.
- Support engineer: read WinDbg stacks and context.
- Endpoint support: separate BSOD, power loss, reboot, purges.
Related Skills
A lightweight wrapper and automation tool for Jaeger-related GitHub scenarios.
Vault Wrap is a wrapping skill for Vault and GitHub automation.
Port management, threat-intel audits, drift checks, and multi-node monitoring for self-hosted infrastructure.
Provides health checks for HTTP, TCP, Ping, and log sources with dynamic-threshold alerts, anomaly detection, and scheduled inspection reports.