---
id: 4397
title: "Debugging Windows Isolated User Mode (IUM) Processes"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/debugging-windows-isolated-user-mode-ium-processes.html"
published_at: "2023-09-06T22:00:00Z"
tags: ["windows", "reverse-engineering", "hyper-v", "debugging", "ium", "trustlet"]
phying_url: "https://phying.com/item/4397"
lang: en
---

# Debugging Windows Isolated User Mode (IUM) Processes

## Summary

How to debug Windows Isolated User Mode (IUM) processes, aka Trustlets: using Hyper-V's virtual TPM as the target, with background on Virtual Secure Mode and Virtual Trust Levels.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2023-09-06T22:00:00Z
- **Original:** https://blog.quarkslab.com/debugging-windows-isolated-user-mode-ium-processes.html
- **Phying News:** https://phying.com/item/4397