m1-01-Processes

Windows Kernel Programming 1

Buy nowLearn more

Introduction

  • m0-Introduction
  • WindowsKernelProgrammingLabs.pdf
  • WindowsKernelProgramming.pdf
  • Code.zip

Windows Internals Overview

  • m1-01-Processes
  • m1-02-VirtualMemory
  • m1-03-VirtualMemory-2
  • m1-04-Threads
  • m1-05-Windows-Acrchitecture
  • m1-06-Thread-Priorities
  • m1-07-Thread-Scheduling
  • m1-08-Subsystem-APIs
  • m1-09-Native-API

Introduction to WinDbg

  • m1-10-Introduction-to-WinDbg
  • m1-11-Demo-WinDbg-User-Mode
  • m1-12-Demo-WinDbg-User-Mode-2
  • m1-13-Local-Kernel-Debugging
  • m1-14-Lab-WinDbg
  • m1-15-Process-Data-Structures
  • m1-16-Manipulating-Kernel-Memory

Handles and Objects

  • m1-17-Objects-And-Handles
  • m1-18-More-Kernel-Objects

The I/O System

  • m2-01-IO-System-Components
  • m2-02-Accessing-Objects2
  • m2-03-NtOpenFile
  • m2-04-IO-APIs
  • m2-05-Kernel-Device-Drivers

Device Driver Basics

  • m3-01-Driver-Basics
  • m3-02-String-And-Memory-APIs
  • m3-03-ExAllocatePool2
  • m3-04-Deploying-And-Testing
  • m3-05-Registry
  • m3-06-Tools-Questions-And-Lab
  • m3-07-Asserts-and-Traces
  • m3-08-Object-Attributes
  • m3-09-Driver-and-Devices

The Booster Driver

  • m3-10-Booster-Driver-Client
  • m3-11-Booster-Driver-1
  • m3-12-Booster-Driver-2
  • m3-13-Booster-Deploy-and-Test
  • m3-14-Remote-Kernel-Debugging
  • m3-15-Odds-and-Ends

The I/O Request Packet (IRP)

  • m4-01-IRP-Introduction
  • m4-02-Completing-IRP
  • m4-03-Referencing-User-Buffers
  • m4-04-DeviceIoControl-Buffers
  • m4-05-Labs-Solutions2
  • m4-06-QandA

Interrupts and Exceptions

  • m5-01-Interrupts-and-IRQLs
  • m5-02-DPCs3
  • m5-03-Exceptions
  • m5-04-BSOD

Synchronization

  • m5-05-Thread-Synchronization
  • m5-06-Mutex
  • m5-07-QandA-Driver-Signing
  • m5-08-Mutex-2
  • m5-09-Using-RAII
  • m5-10-APCs
  • m5-11-Fast-Mutex
  • m5-12-Semaphore
  • m5-13-Events
  • m5-14-Executive-Resource
  • m5-15-Spin-Locks

Threads and Timers

  • m5-16-Threads
  • m5-17-Work-Items
  • m5-18-Timers

Process and Thread Monitoring

  • m6-01-Process-Monitoring
  • m6-02-Linked-Lists
  • m6-03-Thread-and-Image-Callbacks
  • m6-04-Lab-ProcMon
  • m6-05-Lab-ProcMon-2

Object and Registry Notifications

  • m7-01-Object-Notifications
  • m7-02-Registry-Notifications
  • m7-03-Lab-ProcMon-3