Extended Windows Memory Dump Analysis: Using and Writing WinDbg Extensions, Database and Event Stream Processing, Data Science and Visualization, Mach

By Software Diagnostics Services, Dmitry Vostokov, Dublin School of Security

The book contains the full Software Diagnostics Services training transcript with 25 hands-on exercises. This training course extends pattern-oriented analysis introduced in Accelerated Windows Memory Dump Analysis, Accelerated .NET Core Memory Dump Analysis, and Advanced Windows Memory Dump Analysis with Data Structures courses with:

Surveying the current landscape of WinDbg extensions with analysis pattern mappingsWriting WinDbg extensions in C, C++, and Rust (new)Connecting WinDbg to NoSQL databasesConnecting WinDbg to streaming and log processing platformsQuerying and visualizing WinDbg output dataUsing Data Science, Machine Learning, and Gen AI for diagnostics and postmortem debugging (new)

The new edition of the training updates existing exercises and includes new ones.

Prerequisites: Working knowledge of WinDbg. Working knowledge of C, C++, or Rust is optional (required only for some exercises). Other concepts are explained when necessary.

Audience: Software developers, software maintenance engineers, escalation engineers, quality assurance engineers, security and vulnerability researchers, malware and memory forensics analysts who want to build memory analysis pipelines.

• Format: Paperback
• Language: English
• ISBN: 1912636514
• ISBN13: 9781912636518
• Release Date: May 2025
• Publisher: Opentask
• Length: 364 Pages
• Weight: 2.57 lbs.
• Dimensions: 0.9" x 8.5" x 11.0"