Slides from Part 1 Slides from Part 2
The full-color transcript of Software Diagnostics Services training sessions with 40 step-by-step exercises, notes, source code of specially created modeling applications, and more than 120 questions and answers. Covers more than 100 crash dump analysis patterns from the x64 and ARM64 process, kernel, and complete (physical) memory dumps. Learn how to analyze application, service, and system crashes and freezes, navigate through memory dump space, and diagnose heap corruption, memory leaks, CPU spikes, blocked threads, deadlocks, wait chains, and much more. The training uses a unique, innovative pattern-oriented analysis approach developed by Software Diagnostics Institute to accelerate learning. Prerequisites: Basic Windows troubleshooting. Audience: Software technical support and escalation engineers, system administrators, security researchers, reverse engineers, malware and memory forensics analysts, software developers, and quality assurance engineers. The 7th edition was fully reworked for the latest WinDbg version and includes memory dump setup and collection methods, defect mechanism patterns, additional Windows 11 ARM64 memory dump analysis exercises, and a relevant review of x64 and ARM64 assembly languages.
The course consists of two parts:
- Title: Accelerated Windows Memory Dump Analysis, Seventh Edition, Part 1, Process User Space: Training Course Transcript and WinDbg Practice Exercises with Notes
- Authors: Dmitry Vostokov, Software Diagnostics Services
- Publisher: OpenTask (February 2026)
- Language: English
- PDF: 414 pages
- ISBN-13: 978-1912636181
- Table of Contents and Sample Exercise
- Title: Accelerated Windows Memory Dump Analysis, Seventh Edition, Part 2, Kernel and Complete Spaces: Training Course Transcript and WinDbg Practice Exercises with Notes
- Authors: Dmitry Vostokov, Software Diagnostics Services
- Publisher: OpenTask (February 2026)
- Language: English
- PDF: 430 pages
- ISBN-13: 978-1912636068
- Table of Contents and Sample Exercise
When you purchase the PDF or printed books, you additionally get free named Software Diagnostics Library membership with access to more than 440 cross-referenced patterns of memory dump analysis, their classification, and more than 70 case studies.
The training course also includes the recording of the training sessions and Practical Foundations of Windows Debugging, Disassembling, Reversing, Third Edition book.
There is an option to buy 17 volumes of Memory Dump Analysis Anthology in PDF format together with the course.