Introduction

• m0-Introduction

• WindowsKernelProgrammingLabs.pdf

• WindowsKernelProgramming.pdf

• Code.zip

Windows Internals Overview

• m1-01-Processes

• m1-02-VirtualMemory

• m1-03-VirtualMemory-2

• m1-04-Threads

• m1-05-Windows-Acrchitecture

• m1-06-Thread-Priorities

• m1-07-Thread-Scheduling

• m1-08-Subsystem-APIs

• m1-09-Native-API

Introduction to WinDbg

• m1-10-Introduction-to-WinDbg

• m1-11-Demo-WinDbg-User-Mode

• m1-12-Demo-WinDbg-User-Mode-2

• m1-13-Local-Kernel-Debugging

• m1-14-Lab-WinDbg

• m1-15-Process-Data-Structures

• m1-16-Manipulating-Kernel-Memory

Handles and Objects

• m1-17-Objects-And-Handles

• m1-18-More-Kernel-Objects

The I/O System

• m2-01-IO-System-Components

• m2-02-Accessing-Objects2

• m2-03-NtOpenFile

• m2-04-IO-APIs

• m2-05-Kernel-Device-Drivers

Device Driver Basics

• m3-01-Driver-Basics

• m3-02-String-And-Memory-APIs

• m3-03-ExAllocatePool2

• m3-04-Deploying-And-Testing

• m3-05-Registry

• m3-06-Tools-Questions-And-Lab

• m3-07-Asserts-and-Traces

• m3-08-Object-Attributes

• m3-09-Driver-and-Devices

The Booster Driver

• m3-10-Booster-Driver-Client

• m3-11-Booster-Driver-1

• m3-12-Booster-Driver-2

• m3-13-Booster-Deploy-and-Test

• m3-14-Remote-Kernel-Debugging

• m3-15-Odds-and-Ends

The I/O Request Packet (IRP)

• m4-01-IRP-Introduction

• m4-02-Completing-IRP

• m4-03-Referencing-User-Buffers

• m4-04-DeviceIoControl-Buffers

• m4-05-Labs-Solutions2

• m4-06-QandA

Interrupts and Exceptions

• m5-01-Interrupts-and-IRQLs

• m5-02-DPCs3

• m5-03-Exceptions

• m5-04-BSOD

Synchronization

• m5-05-Thread-Synchronization

• m5-06-Mutex

• m5-07-QandA-Driver-Signing

• m5-08-Mutex-2

• m5-09-Using-RAII

• m5-10-APCs

• m5-11-Fast-Mutex

• m5-12-Semaphore

• m5-13-Events

• m5-14-Executive-Resource

• m5-15-Spin-Locks

Threads and Timers

• m5-16-Threads

• m5-17-Work-Items

• m5-18-Timers

Process and Thread Monitoring

• m6-01-Process-Monitoring

• m6-02-Linked-Lists

• m6-03-Thread-and-Image-Callbacks

• m6-04-Lab-ProcMon

• m6-05-Lab-ProcMon-2

Object and Registry Notifications

• m7-01-Object-Notifications

• m7-02-Registry-Notifications

• m7-03-Lab-ProcMon-3