Mark Russinovich – författare

The definitive guide to modern Windows internals: new coverage of virtualization, file systems, boot, security, and more.

For advanced computing professionals, this is the definitive up-to-date guide to how Windows core components behave “under the hood.” Using it, experienced developers can build more powerful and scalable software, administrators can debug complex system and performance problems, and security researchers can harden their systems. This Seventh Edition is fully updated through the May 2021 (21H1/2104) updates to Windows 10 and Windows Server (2022, 2019, and 2016). It adds extensive content on Hyper-V, plus fully rewritten chapters on the boot process, new storage technologies, and Windows system and management mechanisms. As always, it delivers unparalleled insight based on insider access to Microsoft source code, with hands-on experiments using the latest debugging tools to show you Windows’ internal behaviors firsthand. With Windows 11 introducing new user interface design elements that build upon the same core technologies as Windows 10, readers will be well-prepared for this new chapter of computing.

Leading Windows insiders help you:

• Discover system mechanisms for serving device drivers and applications, including ALPC, Object Manager, synchronization, WNF, WoW64, and the processor execution model

• Explore underlying hardware architecture, including trap processing, segmentation, and side channel vulnerabilities

• Understand Windows virtualization, and how virtualization-based security (VBS) protects against OS vulnerabilities

• Delve into key management and configuration mechanisms, including the Registry, Windows services, WMI, and Task Scheduling

• Explore diagnostic services such as Event Tracing for Windows (ETW) and DTrace

• Learn how the cache manager and file system drivers interact to provide reliable support for files, directories, and disks, including on Persistent Memory (NVDIMM) DAX devices.

• Understand NTFS, ReFS, and other Windows file systems

• Review Windows startup/shutdown operations, and OS components involved in boot flow

• Analyze UEFI-based Secure Boot, Measured Boot, and Secure Launch

About This Book

• For experienced programmers, architects, software quality and performance specialists, administrators, security practitioners, and support professionals

• Assumes you are a Windows power user

The definitive guide–fully updated for Windows 10 and Windows Server 2016

Delve inside Windows architecture and internals, and see how core components work behind the scenes. Led by a team of internals experts, this classic guide has been fully updated for Windows 10 and Windows Server 2016.

Whether you are a developer or an IT professional, you’ll get critical, insider perspectives on how Windows operates. And through hands-on experiments, you’ll experience its internal behavior firsthand–knowledge you can apply to improve application design, debugging, system performance, and support.

This book will help you:

· Understand the Window system architecture and its most important entities, such as processes and threads

· Examine how processes manage resources and threads scheduled for execution inside processes

· Observe how Windows manages virtual and physical memory

· Dig into the Windows I/O system and see how device drivers work and integrate with the rest of the system

· Go inside the Windows security model to see how it manages access, auditing, and authorization, and learn about the new mechanisms in Windows 10 and Server 2016

Optimize Windows system reliability and performance with Sysinternals

IT pros and power users consider the free Windows Sysinternals tools indispensable for diagnosing, troubleshooting, and deeply understanding the Windows platform. In this extensively updated guide, Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis help you use these powerful tools to optimize any Windows system’s reliability, efficiency, performance, and security. The authors first explain Sysinternals’ capabilities and help you get started fast. Next, they offer in-depth coverage of each major tool, from Process Explorer and Process Monitor to Sysinternals’ security and file utilities. Then, building on this knowledge, they show the tools being used to solve real-world cases involving error messages, hangs, sluggishness, malware infections, and much more.

Windows Sysinternals creator Mark Russinovich and Aaron Margosis show you how to:

An airliner''s controls abruptly fail mid-flight over the Atlantic. An oil tanker runs aground in Japan when its navigational system suddenly stops dead. Hospitals everywhere have to abandon their computer databases when patients die after being administered incorrect dosages of their medicine. In the Midwest, a nuclear power plant nearly becomes the next Chernobyl when its cooling systems malfunction.At first, these random computer failures seem like unrelated events. But Jeff Aiken, a former government analyst who quit in disgust after witnessing the gross errors that led up to 9/11, thinks otherwise. Jeff fears a more serious attack targeting the United States computer infrastructure is already under way. And as other menacing computer malfunctions pop up around the world, some with deadly results, he realizes that there isn''t much time if he hopes to prevent an international catastrophe.Written by a global authority on cyber security, Zero Day presents a chilling "what if" scenario that, in a world completely reliant on technology, is more than possible today---it''s a cataclysmic disaster just waiting to happen.

It''s two years after the Zero Day attacks, and cyber-security analyst Jeff Aiken is reaping the rewards for crippling Al-Qaida''s assault on the computer infrastructure of the Western world. His company is flourishing, and his relationship with former government agent Daryl Haugen has intensified since she became a part of his team.But the West is under its greatest threat yet. A revolutionary, invisible trojan that alters data without leaving a trace---more sophisticated than any virus seen before---has been identified, roiling international politics. Jeff and Daryl are summoned to root it out and discover its source. As the trojan penetrates Western intelligence, and the terrifying truth about its creator is revealed, Jeff and Daryl find themselves in a desperate race to reverse it as the fate of both East and West hangs in the balance.A thrilling suspense story and a sober warning from one of the world''s leading experts on cyber-security, Trojan Horse exposes the already widespread use of international cyber-espionage as a powerful and dangerous weapon, and the lengths to which one man will go to stop it.

In Rogue Code, Mark Russinovich takes high-frequency trading one step further to show how a ruthless breed of traders'' grip on high finance makes the stock market vulnerable to hackers who could bring about worldwide financial collapse.Cyber security expert Jeff Aiken knows that no computer system is completely secure. When he''s called to investigate a possible breach at the New York Stock Exchange, he discovers not only that their system has been infiltrated but that someone on the inside knows. Yet for some reason, they have allowed the hackers to steal millions of dollars from accounts without trying to stop the theft.When Jeff uncovers the crime, the NYSE suddenly turns on him. Accused of grand larceny, he must find and expose the criminals behind the theft, not just to prove his innocence but to stop a multi-billion-dollar heist that could upend the U.S. economy. Unwilling to heed Jeff''s warnings, the NYSE plans to continue with a major IPO using a new, untested system, one that might be susceptible both to hackers and to ruthless high-frequency traders willing to take any risk to turn a profit.Now Jeff Aiken must unearth the truth on his own, following the thread to the back alleys of Rio de Janeiro to take on one of the world''s most ruthless cartels.Praised for his combination of real-world technology and quick-paced action, with Rogue Code Mark Russinovich delivers an intense thriller about a cyber threat that seems all too possible--and the Wall Street traders who might allow it to happen.Includes a foreword by Haim Bodek, author of The Problem of HFT: Collected Writings on High Frequency Trading & Stock Market Structure Reform.

A thought-provoking new short story from the acclaimed author of Zero Day and Trojan Horse. Challenging Anonymous is like waving a red flag in front of a bull. But the CEO of a major investment firm has done just that, and now cyber security expert Jeff Aiken has to try to protect the company from its leader''s mistakes. The timing couldn''t be worse, as Jeff is scheduled to appear at a conference that has invited an Anonymous representative as well. And Jeff''s about to discover that the hacker outfit plans to bring their fight offline--and into the real world.

It''s two years post-Zero Day, and former government analyst Jeff Aiken is reaping the rewards for crippling al-Qaida''s attack on the computer infrastructure of the Western world. His cyber-security company is flourishing, and his relationship with Daryl Haugen intensifies when she becomes a part of his team. But the West is under the East''s greatest threat yet. The Stuxnet virus that successfully subverted Iran''s nuclear defense program for years is being rapidly identified and defeated, and Stuxnet''s creators are stressed to develop a successor. As Jeff and Daryl struggle to stay together, they''re summoned to disarm the attack of a revolutionary, invisible trojan that alters data without leaving a trace. As the trojan penetrates Western intelligence, the terrifying truth about Iran is revealed, and Jeff and Daryl find themselves running a desperate race against time to reverse it - while the fate of both East and West hangs in the balance. Like Zero Day, Trojan Horse is a thrilling suspense story, a sober warning from one of the world''s leading experts on cyber-security, Microsoft Technical Fellow Mark Russinovich. Trojan Horse demystifies the already common use of international cyber-espionage as a powerful and dangerous weapon, and the lengths to which one man will go to stop it.