[{"_1":2,"_68":-5,"_69":-5},"loaderData",{"_3":4,"_38":39,"_66":-5,"_67":-5},"root",{"_5":-5,"_6":-5,"_7":8,"_22":23,"_24":25,"_26":27,"_30":31,"_36":37},"user","shoppingCartId","shoppingCart",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":14},"id","no-cart","count",0,"free",true,"updatedAt","","paymentGateway","STRIPE","cartItems",[],"loading","locale","en","readerTheme","light","constants",{"_28":29},"paypalClientId","AX53Cwz8jR6rVVzzZiZNWWXl0dGagi-GZrjG-S3Ua14E5nrKMn7DxDQ730O4R8LusLPp49ALn6aRVaEy","publishers",{"_32":33,"_34":35},"companies",[],"universities",[],"needsLocaleCookieSync",false,"routes/_store+/_readers+/email_author.$slug/route",{"_40":41,"_65":-5},"book",{"_9":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6Qm9va1Byb2R1Y3QvNDc0NDE","title","Accelerated Windows Memory Dump Analysis, Seventh Edition, Part 2, Kernel and Complete Spaces","state","published","contactAuthorMethod","email","aboutText","

The full-color transcript of Software Diagnostics Services training sessions with 15 step-by-step exercises, notes, source code of specially created modeling applications, and 45 questions and answers. Covers more than 50 crash dump analysis patterns from the x64 and ARM64 kernel and complete (physical) memory dumps. Learn how to analyze system crashes and freezes, navigate through the kernel and complete spaces, and diagnose patterns of abnormal software behavior with the WinDbg debugger. The training uses a unique, innovative pattern-oriented analysis approach developed by Software Diagnostics Institute to accelerate learning. Prerequisites: Basic Windows troubleshooting. Audience: Software technical support and escalation engineers, system administrators, security researchers, reverse engineers, malware and memory forensics analysts, software developers and quality assurance engineers, and site reliability engineers. The 7th edition was fully reworked for the latest WinDbg version and includes memory dump setup and collection methods, an additional ARM64 memory dump analysis exercise, and a relevant review of x64 and ARM64 assembly languages.

","authors",[53],{"_9":54,"_55":56,"_5":57},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6UHJvZHVjdEF1dGhvci80OTU1Mg","name","Dmitry Vostokov",{"_58":59},"avatar",{"_60":61,"_62":63,"_64":14},"url","https://d39qdlcrvnra4b.cloudfront.net/avatars/1292000/medium/DVostokovFormal1-Amazon.jpg?1572772315","styleName","medium","exists","currentUser","routes/_store+/_layout","routes/_store+/_readers+/_layout","actionData","errors"]

Email the Author