Advanced Windows Memory Dump Analysis with Data Structures: Training Course Transcript and WinDbg Practice Exercises with Notes, Second Edition

The full transcript of Memory Dump Analysis Services Training with 10 step-by-step exercises, notes, and selected questions and answers. Learn how to navigate through memory dump space and Windows data structures to troubleshoot and debug complex software incidents. The training uses a unique and innovative pattern-driven analysis approach to speed up the learning curve. It consists of practical step-by-step exercises using WinDbg to diagnose structural and behavioural patterns in 64-bit kernel and complete (physical) memory dumps. Additional topics include memory search, kernel linked list navigation, practical WinDbg scripting, registry, system variables and objects, device drivers and I/O. Prerequisites are basic and intermediate level Windows memory dump analysis: ability to list processors, processes, threads, modules, apply symbols, walk through stack traces and raw stack data, diagnose patterns such as heap corruption, CPU spike, memory and handle leaks, access violation, stack overflow, critical section and resource wait chains and deadlocks. If you don't feel comfortable with prerequisites then Accelerated Windows Memory Dump Analysis training book is recommended before purchasing and reading this book course. Audience: Software developers, software technical support and escalation engineers, reverse and security research engineers. The 2nd edition contains updated exercises for the latest WinDbg version from Windows SDK 8.1.

About the Author

Dmitry Vostokov is an internationally recognized expert, speaker, educator, scientist and author. He is a founder of pattern-oriented software diagnostics, forensics and prognostics discipline and Software Diagnostics Institute (DumpAnalysis.org). Vostokov has also authored more than 30 books on software diagnostics, forensics and problem solving, memory dump analysis, debugging, software trace and log analysis, reverse engineering and malware analysis. He has more than 20 years of experience in software architecture, design, development and maintenance in variety of industries including various leadership, technical and people management roles. Dmitry also founded OpenTask Iterative and Incremental Publishing (OpenTask.com), Software Diagnostics Services (former Memory Dump Analysis Services) PatternDiagnostics.com and Software Prognostics. In his spare time he presents various topics on Debugging.TV and explores Software Narratology, an applied science of software stories that he pioneered.