The book contains the full Software Diagnostics Services training transcript with 25 hands-on exercises. This training course extends pattern-oriented analysis introduced in Accelerated Windows Memory Dump Analysis, Accelerated .NET Core Memory Dump Analysis, and Advanced Windows Memory Dump Analysis with Data Structures courses with:
- Surveying the current landscape of WinDbg extensions with analysis pattern mappings
- Writing WinDbg extensions in C, C++, and Rust (new)
- Connecting WinDbg to NoSQL databases
- Connecting WinDbg to streaming and log processing platforms
- Querying and visualizing WinDbg output data
- Using Data Science, Machine Learning, and Gen AI for diagnostics and postmortem debugging (new)
The new edition of the training updates existing and includes new exercises.
Prerequisites: Working knowledge of WinDbg. Working knowledge of C, C++, or Rust is optional (required only for some exercises). Other concepts are explained when necessary.
Audience: Software developers, software maintenance engineers, escalation engineers, quality assurance engineers, security and vulnerability researchers, malware and memory forensics analysts who want to build memory analysis pipelines.
- Title: Extended Windows Memory Dump Analysis: Using and Writing WinDbg Extensions, Database and Event Stream Processing, Data Science and Visualization, Machine Learning and AI, Second Edition
- Authors: Dmitry Vostokov, Software Diagnostics Services, Dublin School of Security
- Publisher: OpenTask (November 2024)
- Language: English
- Product Dimensions: 28.0 x 21.6
- PDF: 362 pages
- ISBN-13: 978-1912636518
Table of Contents and sample exercise
Slides from the training
There is an option to buy 16 volumes of Memory Dump Analysis Anthology in PDF format and recording together with the course.
When you purchase the PDF book, you additionally get free named Software Diagnostics Library membership with access to more than 440 cross-referenced patterns of memory dump analysis, their classification, and more than 70 case studies.
The version of the training course with recording also includes Practical Foundations of Windows Debugging, Disassembling, Reversing, Second Edition PDF book.