TrainSec - Student portal
Login

  • $149

Windows Internals: Day 3

  • Course
  • 49 Lessons
  • Includes 1 private space
  • Discord access

Day 3 deals with various kernel mechanisms.
Buy now

Includes 1 private space

  • Windows Internals & Programming

Read more about the instructors, course contents and special pricing:

READ MOREAre you an individual student? Apply for a disocunt

Contents

Introduction

00-Introduction
WindowsInternalsLabs-Day3.pdf
WindowsInternals-Day3.pdf
WintDay3-LabsAndDemos.zip
Aside - Kernel Design Notes

Interrupts

01-Hardware Interrupts
Preview
Lab - IDT
02-Interrupt Dispatching
03-IRQLs
04-Interrupt Dispatch Table
05-ISRs and IRQLs
06-DPCs

Exceptions

07-Exceptions
08-Exception Handling
09-Termination Handlers
10-SEH and High Level Exceptions
11-Finaly in C++

System Crash

12-System Crash
13-BSOD Information
Lab - Not My Fault

Object Management

14-The Object Manager
Preview
15-Object Structure
Lab- object headers
17-Handle Entry
16-Objects and Handles

Sharing Kernel Objects

18-Sharing Objects by Name
19-Handle Inheritance
20-Duplicating Handles

Object Management (Part 2)

Lab - Maximum handles
21-Maximum Handles
22-Handle Usage
23-Object Names
24-Object Name Demo
25-User and GDI Objects

Synchronization

26-Synchronization Overview
27-The Interlocked Functions
28-Kernel Dispatcher Objects
29-Mutex
Lab - Mutex
30-Semaphore
31-Event
32-Critical Section
33-Executive Resource
34-APCs
35-Fast Mutex

More Mechanisms

36-NT Global Flags
37-ETW
38-WoW64
39-WoW64 (cont.)