Table of Contents

IntroductionCHAPTER 8 System mechanismsCHAPTER 9 Virtualization technologiesCHAPTER 10 Management, diagnostics, and tracingCHAPTER 11 Caching and file systemsCHAPTER 12 Startup and shutdown

Long Description

Drill down into Windows architecture and internals, discover how core Windows components work behind the scenes, and master information you can continually apply to improve architecture, development, system administration, and support. Led by three renowned Windows internals experts, this classic guide is now fully updated for Windows 10 and 8.x. As always, it combines unparalleled insider perspectives on how Windows behaves "under the hood" with hands-on experiments that let you experience these hidden behaviours first hand. Part 2 examines these and other key Windows 10 OS components and capabilities: Startup and shutdown The Windows Registry Windows management mechanisms WMI System mechanisms ALPC ETW Cache Manager Windows file systems The hypervisor and virtualization UWP Activation Revised throughout, this edition also contains three entirely new chapters: Virtualization technologies Management diagnostics and tracing Caching and file system support microsoft windows; windows 10 internals; windows server internals; windows os internals; windows technical reference; russinovich; winternals book

Feature

The complete, official source of public information on Windows internal behavior, mechanisms, and operation: crucial for software architecture, driver development, debugging, reverse engineering, system optimization, security hardening, and support Covers UEFI boot, including secure launch & measured boot, the registry, WMI, ALPC, Event Tracing for Windows (ETW), Windows Notification Facility (WNF), the cache manager, NTFS and ReFS, Hyper-V, the secure kernel and virtualization based security (VBS), the Universal Windows Platform (UWP) application model, and more Demonstrates key Windows behaviors with hands-on experiments you can replicate, leveraging the latest debugger technologies such as NatVis and LINQ

New Feature

The book has been largely rewritten and thoroughly updated to cover all the versions of Windows 10, up to the 2104 Update (21H1), including past changes from Windows 8.1. Encompassing the significant kernel and system changes in the last 11 years since Windows 7, it expands on Part 1 by including new chapters on virtualization technologies, management mechanisms, including diagnostics and tracing, system mechanisms such as ALPC and WNF, and caching and file system support (including a description of the ReFs file system), plus startup and shutdown using new technologies such as UEFI and Secure Launch. Hands-on experiments have been updated throughout, both to expand into the learning material as well as to showcase improvements in the Windows Debugging Tools.

Details