These volumes are now also called Diagnomicon!
The new Volume 15 brings the total number of books to 17.
Now includes the Revised Edition of Volume 1, Revised Edition of Volume 2, Revised Edition of Volume 3 in PDF and EPUB formats, and Revised Edition of Volume 4, Revised Edition of Volume 5 in PDF format. The set is available in PDF, paperback* formats.
Memory Dump Analysis Anthology contains revised, edited, cross-referenced, and thematically organized selected articles from Software Diagnostics Institute and Software Diagnostics Library (former Crash Dump Analysis blog) about software diagnostics, debugging, crash dump analysis, software trace and log analysis, malware analysis, and memory forensics. Its 15 volumes in 17 books have more than 5,200 pages and, among many topics, include more than 380 memory analysis patterns (mostly for WinDbg Windows debugger with selected macOS and Linux GDB variants), more than 70 WinDbg case studies, and more than 230 general trace and log analysis patterns. In addition, there are three supplemental volumes with articles reprinted in full color.
Tables of Contents and Indexes of WinDbg Commands from all volumes
Click on an individual volume to see its description and table of contents:
The printed paperback version also includes 3 color supplements for volumes 1 - 7 and trackable shipping to most countries of North America and Europe. If your country trackable shipping is expensive you will be contacted with additional payment information. The order is shipped in 5 working days.
When you purchase the set you additionally get free named Software Diagnostics Library membership with access to more than 380 cross-referenced patterns of memory dump analysis, their classification, more than 70 case studies, and more than 230 trace and log analysis patterns.
Individual volumes are available for purchase separately.
*Paperback Volumes 1 - 7 are available only in B/W. Paperback Volumes 8 - 14 are always in full color. Paperback Volume 15 will be available in May 2023 and will be shipped separately.