TLDR InfoSec · STRATEGIES & TACTICS

UNRAVELING TIME: A DEEP DIVE INTO TTD INSTRUCTION EMULATION BUGS

cloud.google.com10 min read

Summary from the TLDR InfoSec newsletter

Microsoft's Time Travel Debugging (TTD) framework is a powerful record-and-replay tool that uses CPU instruction emulation to replay program execution. Google's Mandiant team found a bug in the emulation engine and built a fuzzing harness to execute random instruction sequences through TTD and a real CPU, discovering three bugs in the process, which they reported to Microsoft.