Accelerated Windows Memory Dump Analysis, Fifth Edition, Revised

Slides from Part 1 Slides from Part 2

The full-color transcript of Software Diagnostics Services training sessions with 32 step-by-step exercises, notes, source code of specially created modeling applications, and more than 120 questions and answers. Covers more than 65 crash dump analysis patterns from x86 and x64 process, kernel, and complete (physical) memory dumps. Learn how to analyze application, service and system crashes and freezes, navigate through memory dump space and diagnose heap corruption, memory leaks, CPU spikes, blocked threads, deadlocks, wait chains, and much more. The training uses a unique and innovative pattern-oriented analysis approach developed by Software Diagnostics Institute to speed up the learning curve. Prerequisites: Basic Windows troubleshooting. Audience: Software technical support and escalation engineers, system administrators, security researchers, reverse engineers, malware and memory forensics analysts, software developers, and quality assurance engineers. The 5th edition was fully reworked with new memory dumps, additional slides, exercises, and analysis patterns. It was further revised with some exercises updated to Windows 11, expanded Q&A, and optional Docker image.

The course consists of two parts:

  • Title: Accelerated Windows Memory Dump Analysis, Fifth Edition, Part 1, Revised, Process User Space: Training Course Transcript and WinDbg Practice Exercises with Notes
  • Authors: Dmitry Vostokov, Software Diagnostics Services
  • Publisher: OpenTask (December 2021)
  • Language: English
  • PDF or Paperback: 410 pages
  • ISBN-13: 978-1912636051
  • Table of Contents
  • Title: Accelerated Windows Memory Dump Analysis, Fifth Edition, Part 2, Revised, Kernel and Complete Spaces: Training Course Transcript and WinDbg Practice Exercises with Notes
  • Authors: Dmitry Vostokov, Software Diagnostics Services
  • Publisher: OpenTask (December 2021)
  • Language: English
  • PDF or Paperback: 370 pages
  • ISBN-13: 978-1912636082
  • Table of Contents

When you purchase the PDF or printed books you additionally get free named Software Diagnostics Library membership with access to more than 370 cross-referenced patterns of memory dump analysis, their classification, and more than 70 case studies.

The training course also includes recording of one of the previous training sessions and Practical Foundations of Windows Debugging, Disassembling, Reversing book.

The printed paperback course version also includes printed Practical Foundations books and trackable shipping to most countries of North America and Europe. If your country trackable shipping is expensive you will be contacted with additional payment information. The order is shipped in 5 working days. The full-color Accelerated book will be personalized with a unique CID with the possibility to print a name on a full-color awareness study certificate as a first book page.

There is an option to buy 14 volumes of Memory Dump Analysis Anthology in PDF format together with the course.

Type and speed (links sent in 24 hours)