Accelerated Windows Memory Dump Analysis, Fifth Edition

Slides from Part 1 Slides from Part 2

The full-color transcript of Software Diagnostics Services training sessions with 32 step-by-step exercises, notes, source code of specially created modeling applications, and more than 100 questions and answers. Covers more than 65 crash dump analysis patterns from x86 and x64 process, kernel, and complete (physical) memory dumps. Learn how to analyze application, service and system crashes and freezes, navigate through memory dump space and diagnose heap corruption, memory leaks, CPU spikes, blocked threads, deadlocks, wait chains, and much more. The training uses a unique and innovative pattern-oriented analysis approach developed by Software Diagnostics Institute to speed up the learning curve. Prerequisites: Basic Windows troubleshooting. Audience: Software technical support and escalation engineers, system administrators, security researchers, reverse engineers, malware and memory forensics analysts, software developers, and quality assurance engineers. The 5th edition was fully reworked with new memory dumps, additional slides, exercises, and analysis patterns.

The course consists of two parts:

  • Title: Accelerated Windows Memory Dump Analysis, Fifth Edition, Part 1, Process User Space: Training Course Transcript and WinDbg Practice Exercises with Notes
  • Authors: Dmitry Vostokov, Software Diagnostics Services
  • Publisher: OpenTask (November 2019)
  • Language: English
  • PDF + EPUB: 387 pages
  • ISBN-13: 978-1912636051
  • Table of Contents
  • Title: Accelerated Windows Memory Dump Analysis, Fifth Edition, Part 2, Kernel and Complete Spaces: Training Course Transcript and WinDbg Practice Exercises with Notes
  • Authors: Dmitry Vostokov, Software Diagnostics Services
  • Publisher: OpenTask (October 2021)
  • Language: English
  • PDF: 343 pages
  • ISBN-13: 978-1912636082
  • Table of Contents

When you purchase the PDF book you additionally get free named Software Diagnostics Library membership with access to more than 370 cross-referenced patterns of memory dump analysis, their classification, and more than 70 case studies.

The training course also includes Historical Recording of one of the previous editions and Practical Foundations of Windows Debugging, Disassembling, Reversing PDF book.

There is an option to buy 14 volumes of Memory Dump Analysis Anthology in PDF format together with the course.

Links sent in 24 hours