دانلود ایبوک Windows Internals 5th Edition

به صراحت می توان گفت یکی از کامل ترین مراجع ویندوز، کتاب Windows Internals 5th Edition می باشد. در این ایبوک به بررسی دقیق و بسیار جزئی ویندوز پرداخته شده است. این منبع Windows Internals بسیار خوبی برای برنامه نویسان می باشد. یکی از مزیت های این کاب، پوشش دهی ویندوز ویستا و 2008 می باشد. هندبوک Windows Internals شامل  1048 صفحه می باشد و از انتشارات معروف Microsoft می باشد.

سرفصل های این کتاب:

Table of Contents

i
 Concepts and Tools
 Windows Operating System Versions
 Foundation Concepts and Terms
 Windows API
 Services, Functions, and Routines
 Processes, Threads, and Jobs
 Virtual Memory
 Kernel Mode vs User Mode
 Terminal Services and Multiple Sessions
 Objects and Handles
 Security
 Registry
 Unicode
 Digging into Windows internals
 Reliability and Performance Monitor
 Kernel Debugging
 Windows Software Development Kit
 Windows Driver Kit
 Sysinternals Tools
 Conclusion
 System Architecture
 Requirements and Design Goals
 Operating System Model
 Architecture Overview
 Portability
 Symmetric Multiprocessing
 Scalability
 Differences Between Client and Server Versions
 Checked Build
 Key System Components
 Environment Subsystems and Subsystem DLLs
 Ntdlldll
 Executive
 Kernel
 Hardware Abstraction Layer
 Device Drivers
 System Processes

ii
 Conclusion
 System Mechanisms
 Trap Dispatching
 Interrupt Dispatching
 Exception Dispatching
 System Service Dispatching
 Object Manager
 Executive Objects
 Object Structure
 Synchronization
 High-IRQL Synchronization
 Low-IRQL Synchronization
 System Worker Threads
 Windows global Flags
 Advanced Local Procedure Calls (ALPCs)
 Kernel event Tracing
 Wow
 Wow Process Address Space Layout
 System Calls
 Exception Dispatching
 User Callbacks
 File System Redirection
 Registry Redirection and Reflection
 I/O Control Requests
 -Bit Installer Applications
 Printing
 Restrictions
 user-Mode Debugging
 Kernel Support
 Native Support
 Windows Subsystem Support
 Image Loader
 Early Process Initialization
 Loaded Module Database
 Import Parsing
 Post Import Process Initialization
 Hypervisor (Hyper-V)
 Partitions
 Root Partition
 Child Partitions
 Hardware Emulation and Support
 Kernel Transaction Manager
 Hotpatch Support

iii
 Kernel Patch Protection
 Code integrity
 Conclusion
 Management Mechanisms
 The Registry
 Viewing and Changing the Registry
 Registry Usage
 Registry Data Types
 Registry Logical Structure
 Monitoring Registry Activity
 Registry Internals
 Services
 Service Applications
 The Service Control Manager
 Service Startup
 Startup Errors
 Accepting the Boot and Last Known Good
 Service Failures
 Service Shutdown
 Shared Service Processes
 Service Tags
 Service Control Programs
 Windows Management instrumentation
 Providers
 The Common Information Model and the Managed Object Format
Language
 Class Association
 WMI Implementation
 WMI Security
 Windows Diagnostic infrastructure
 WDI Instrumentation
 Diagnostic Policy Service
 Diagnostic Functionality
 Conclusion
 Processes, Threads, and Jobs
 Process Internals
 Data Structures
 Kernel Variables
 Performance Counters
 Relevant Functions
 Protected Processes
 Flow of CreateProcess

iv
 Stage : Converting and Validating Parameters and Flags
 Stage : Opening the Image to Be Executed
 Stage : Creating the Windows Executive Process Object
(PspAllocate- Process)
 Stage : Creating the Initial Thread and Its Stack and Context
 Stage : Performing Windows Subsystem–Specific
Post-Initialization
 Stage : Starting Execution of the Initial Thread
 Stage : Performing Process Initialization in the Context of the New
Process
 Thread Internals
 Data Structures
 Kernel Variables
 Performance Counters
 Relevant Functions
 Birth of a Thread
 Examining Thread activity
 Worker Factories (Thread Pools)
 Thread Scheduling
 Overview of Windows Scheduling
 Priority Levels
 Windows Scheduling APIs
 Relevant Tools
 Real-Time Priorities
 Thread States
 Dispatcher Database
 Quantum
 Scheduling Scenarios
 Context Switching
 Idle Thread
 Priority Boosts
 Multiprocessor Systems
 Multiprocessor Thread-Scheduling Algorithms
 CPU Rate Limits
 Job Objects
 Conclusion
 Security
 Security Ratings
 Security System Components
 Protecting Objects
 Access Checks
 Security Descriptors and Access Control
 Account Rights and Privileges

v
 Account Rights
 Privileges
 Super Privileges
 Security Auditing
 logon
 Winlogon Initialization
 User Logon Steps
 User account Control
 Virtualization
 Elevation
 Software Restriction Policies
 Conclusion
 I/O System
 I/O System Components
 Device Drivers
 Types of Device Drivers
 Structure of a Driver
 Driver Objects and Device Objects
 Opening Devices
 I/O Processing
 Types of I/O
 I/O Request to a Single-Layered Driver
 I/O Requests to Layered Drivers
 I/O Cancellation
 I/O Completion Ports
 I/O Prioritization
 Driver Verifier
 Kernel-Mode Driver Framework (KMDF)
 Structure and Operation of a KMDF Driver
 KMDF Data Model
 KMDF I/O Model
 user-Mode Driver Framework (uMDF)
 The Plug and Play (PnP) Manager
 Level of Plug and Play Support
 Driver Support for Plug and Play
 Driver Loading, Initialization, and Installation
 Driver Installation
 The Power Manager
 Power Manager Operation
 Driver Power Operation
 Driver and Application Control of Device Power
 Conclusion
 Storage Management

vi
 Storage Terminology
 Disk Drivers
 Winload
 Disk Class, Port, and Miniport Drivers
 Disk Device Objects
 Partition Manager
 Volume Management
 Basic Disks
 Dynamic Disks
 Multipartition Volume Management
 The Volume Namespace
 Volume I/O Operations
 Virtual Disk Service
 BitLocker Drive encryption
 BitLocker Architecture
 Encryption Keys
 Trusted Platform Module (TPM)
 BitLocker Boot Process
 BitLocker Key Recovery
 Full Volume Encryption Driver
 BitLocker Management
 Volume Shadow Copy Service
 Shadow Copies
 VSS Architecture
 VSS Operation
 Uses in Windows
 Conclusion
 Memory Management
 Introduction to the Memory Manager
 Services the Memory Manager Provides
 Large and Small Pages
 Reserving and Committing Pages
 Locking Memory
 Allocation Granularity
 Shared Memory and Mapped Files
 Protecting Memory
 No Execute Page Protection
 Copy-on-Write
 Address Windowing Extensions
 Kernel-Mode Heaps (System Memory Pools)
 Pool Sizes
 Monitoring Pool Usage
 Look-Aside Lists

vii
 Heap Manager
 Types of Heaps
 Heap Manager Structure
 Heap Synchronization
 The Low Fragmentation Heap
 Heap Security Features
 Heap Debugging Features
 Pageheap
 Virtual address Space layouts
 x Address Space Layouts
 x System Address Space Layout
 x Session Space
 System Page Table Entries
 -Bit Address Space Layouts
 -Bit Virtual Addressing Limitations
 Dynamic System Virtual Address Space Management
 System Virtual Address Space Quotas
 User Address Space Layout
 Address Translation
 x Virtual Address Translation
 Translation Look-Aside Buffer
 Physical Address Extension (PAE)
 IA Virtual Address Translation
 x Virtual Address Translation
 Page Fault Handling
 Invalid PTEs
 Prototype PTEs
 In-Paging I/O
 Collided Page Faults
 Clustered Page Faults
 Page Files
 Stacks
 Virtual address Descriptors
 NuMa
 Section Objects
 Driver Verifier
 Page Frame Number Database
 Page List Dynamics
 Page Priority
 Modified Page Writer
 PFN Data Structures
 Physical Memory limits
 Working Sets
 Demand Paging

viii
 Logical Prefetcher
 Placement Policy
 Working Set Management
 Balance Set Manager and Swapper
 System Working Set
 Memory Notification Events
 Proactive Memory Management (SuperFetch)
 Components
 Tracing and Logging
 Scenarios
 Page Priority and Rebalancing
 Robust Performance
 ReadyBoost
 ReadyDrive
 Conclusion
 Cache Manager
 Key Features of the Cache Manager
 Cache Virtual Memory Management
 Cache Size
 Cache Data Structures
 Systemwide Cache Data Structures
 Per-File Cache Data Structures
 File System interfaces
 Copying to and from the Cache
 Caching with the Mapping and Pinning Interfaces
 Caching with the Direct Memory Access Interfaces
 Fast I/O
 read ahead and Write behind
 Intelligent Read-Ahead
 Write-Back Caching and Lazy Writing
 Write Throttling
 System Threads
 Conclusion
 File Systems
 Windows File System Formats
 File System Driver architecture
 Local FSDs
 Remote FSDs
 File System Operation
 File System Filter Drivers
 Troubleshooting File System Problems
 Common log File System

ix
 NTFS Design goals and Features
 High-End File System Requirements
 Advanced Features of NTFS
 NTFS File System Driver
 NTFS On-Disk Structure
 NTFS recovery Support
 Design
 Metadata Logging
 Recovery
 NTFS Bad-Cluster Recovery
 Self-Healing
 Encrypting File System Security
 Encrypting a File for the First Time
 The Decryption Process
 Backing Up Encrypted Files
 Conclusion
 Networking
 Windows Networking Architecture
 The OSI Reference Model
 Windows Networking Components
 Networking APIs
 Windows Sockets
 Winsock Kernel (WSK)
 Remote Procedure Call
 Web Access APIs
 Named Pipes and Mailslots
 NetBIOS
 Other Networking APIs
 Multiple redirector Support
 Multiple Provider Router
 Multiple UNC Provider
 Name resolution
 Location and Topology
 Protocol Drivers
 NDiS Drivers
 Variations on the NDIS Miniport
 Connection-Oriented NDIS
 Remote NDIS
 QoS
 Binding
 Layered Network Services
 Conclusion
 Startup and Shutdown

x
 Boot Process
 BIOS Preboot
 The BIOS Boot Sector and Bootmgr
 The EFI Boot Process
 Initializing the Kernel and Executive Subsystems
 Smss, Csrss, and Wininit
 ReadyBoot
 Images That Start Automatically
 Troubleshooting Boot and Startup Problems
 Shutdown
 Conclusion
 Crash Dump Analysis
 Why Does Windows Crash?
 The Blue Screen
 Troubleshooting Crashes
 Crash Dump Files
 Windows error reporting
 Online Crash analysis
 Basic Crash Dump analysis
 Using Crash Troubleshooting Tools
 Buffer Overrun, Memory Corruptions, and Special Pool
 Code Overwrite and System Code Write Protection
 Advanced Crash Dump analysis
 Stack Trashes
 Hung or Unresponsive Systems
 When There Is No Crash Dump
 Conclusion

———————————————————————————

دانلود

  پسورد: engpedia.ir