Log In
Or create an account ->
Imperial Library
Home
About
News
Upload
Forum
Help
Login/SignUp
Index
About the Author
Presentation Slides and Transcript
Practice Exercises
Exercise 0: Download, setup and verify your WinDbg or WinDbg Preview installation
Exercise P1: Analysis of a normal application process dump (64-bit notepad)
Exercise P2: Analysis of a normal application process dump (32-bit notepad)
Exercise P3: Analysis of a normal application process dump (64-bit Microsoft Edge)
Exercise P4: Analysis of an application process dump (64-bit AppK, no symbols)
Exercise P5: Analysis of an application process dump (64-bit AppK, with application symbols)
Exercise P6: Analysis of an application process dump (AppL, 64-bit)
Exercise P7: Analysis of an application process dump (AppL2, 64-bit)
Exercise P8: Analysis of an application process dump (AppM, 64-bit)
Exercise P9: Analysis of an application process dump (AppN, 64-bit)
Exercise P10: Analysis of an application process dump (AppO, 64-bit)
Exercise P11: Analysis of an application process dump (AppP, 64-bit)
Exercise P12: Analysis of an application process dump (AppR, 32-bit)
Exercise P13: Analysis of an application process dump (AppA, WOW64)
Exercise P14: Analysis of an application process dump (AppS, 64-bit)
Exercise P15: Analysis of an application process dump (notepad, 32-bit)
Exercise P16: Analysis of an application process dump (notepad, 64-bit)
Exercise P17: Analysis of an application process dump (AppQ, 32-bit)
Exercise P18: Analysis of an application process dump (AppQ, 64-bit)
Exercise P19: Analysis of an application process dump (AppT, 64-bit)
Application Source Code
AppA
AppK
AppL
AppL2
AppM
AppN
AppO
AppP
AppR
AppS
AppQ
AppT
Selected Q&A
Triple Dereference
Large Heap Allocations
Footnotes
← Prev
Back
Next →
← Prev
Back
Next →