INT250 - Windows Internals Workshop
Our "flagship" Windows Internals seminar, covering more topics in more detail and with more hands-on time.
Level: | Intermediate |
---|---|
Audience: | Applications developers; systems software developers; device driver developers; system administrators; system integrators; hardware OEMs; I.T. support personnel. |
Description: | This workshop-format seminar is similar in overall content and objectives to our Core Windows Internals seminar (INT201). However, it covers the material in greater detail and addresses several additional topics, particularly in the areas of user mode architecture, security, and system startup and login. In this workshop the attendee will learn the organization, function, and interactions of the most important components of the Windows operating system. We closely examine several key parts of the system, including user-to-kernel mode transitions, internal synchronization mechanisms, thread scheduling, memory management, the I/O subsystem, and security. In many cases will examine these components' behavior and their interaction with each other by using the Windows Debugging Tools. Particular attention is paid to security and other features and enhancements that were added to Windows with Windows Vista and later. |
Topics: |
|
Prerequisites: | Experience using, administering, or developing for Windows, and familiarity with basic operating system concepts. |
Operating systems supported: | This seminar primarily addresses Windows 7 through Windows 10 and Windows Server 2012 R2. Most of the material is applicable to earlier versions of Windows. Earlier versions can be specifically addressed upon request. |
Durations and formats: | 5 days with labs |
Labs: | We follow nearly every discussion of key operating system mechanisms, principles, or concepts with lab exercises. We have you exercise or manipulate the part of the system described, and then examine displays that confirm the expected results. We also have you look for interactions with, and effects on, the rest of the system. This seminar is only available with labs. For lecture-only versions of some of this material, please see the Windows Internals Essentials seminars (INT150, INT151). In the lecture-only version, the lab exercises are replaced with brief demonstrations by the instructor. |
Additional information: | Short formats and Related SeminarsINT201, Windows Internals, covers much of this material but with less detail in many areas. In general we would recommend INT201 for device driver developers and those performing debugging-related tasks. We would recommend this seminar for user mode (application) developers, system administrators, and those interested in in-depth coverage of Windows security. We also offer INT205, Windows Internals Update, for those already familiar with Windows operating system internals from previous versions. SEC240, Windows Security, covers most of the security-related topics from this seminar, with additional information on various security features, including Windows cryptography.CustomizationsAlthough there is certain core material that we feel is essential for all attendees, some areas can be more or less emphasized according to the attendees' requirements, and certain material can be omitted completely. |