...through static analysis. However, there is still a lot of work that could be done toward improving and automating dynamiccode analysis. 3.2.1 - WinDbg Whether just debugging kernel mode code, or analyzing the crash dump from a successful...
http://www.ngssoftware.com/research/papers/Attacking-the-Windows-Kernel.pdf