Chapter 9. Initial Analysis Using adb

Now that we've collected some initial information about the system crash by using various UNIX commands, let's collect some more initial data by using adb . Before we start, however, let's talk about some assumptions we are making at this point.

In the next chapter, we will talk in depth about the header files in the /usr/include directory and how we can use them to gain more insight into the kernel. Shortly after that, we will discuss a very powerful aspect of adb known as macros, two of which we will use in this chapter. We will also cover the namelist (aka the symbol table) in another chapter. We are getting ahead of ourselves a bit in this chapter, but for now, our purpose is to jump right into adb and see it pump out some initial analysis data for us.