|
Understand how the core system and
management mechanisms work—from the object manager to services
to the registry |
|
Explore internal system data
structures using tools like the kernel debugger |
|
Grasp the scheduler’s priority and
CPU placement algorithms |
|
Go inside the Windows security model
to see how it authorizes access to data |
|
Understand how Windows manages
physical and virtual memory |
|
Tour the Windows networking stack
from top to bottom—including APIs, protocol drivers, and network
adapter drivers |
|
Troubleshoot file-system access
problems and system boot problems |
|
The last chapter teaches
the details on how to
analyze crashes! |
Sixth in the series, this edition was again written by Mark Russinovich,
a Technical Fellow in Microsoft’s Azure Group, David Solomon, an
operating systems expert and Windows internals teacher, and Alex
Ionescu, Chief Architect at CrowdStrike and specializing in OS internals
and security. Besides updates for changes in Windows, there are many new
experiments and examples that highlight the use of both existing and new
Sysinternals tools.