I’ve talked previously about thread specific breakpoints, which allow you to set a breakpoint that will only fire for a specific thread. Equally useful are process specific breakpoints, which will only fire for any thread within a given process.
To set a process specific breakpoint, you specify the /p switch to the bp command and supply a process object address:
bp /p 84996030 ntfs!ntfscommoncreate
The process address could, for example, be retrieved from the output of the !process 0 0 command or you can use the handy $proc pseudo register to specify the current process:
bp /p @$proc ntfs!ntfscommoncreate
