Module 7: Exploring the Object Manager & Synchronization Primitives

Windows unifies named kernel objects through the Object Manager, and this module is your guided tour. You’ll map the kernel namespace, enumerate every object it contains, and learn to create, link, duplicate, and query them using pure Native calls. With a solid grasp of directory and symbolic-link objects, you pivot to the synchronization primitives-mutexes, semaphores, events-and finish by managing whole process groups with job objects. By the end of this module, you’ll not only understand how handles and objects work in the system, but also have hands-on techniques for inspecting and orchestrating those objects in your own tools and experiments.