Name: Windows Internals (TrainSec)
Item: Windows Internals (TrainSec)
Author: DFIR Diva

Name & Affiliate Link*: Windows Internals

Platform: TrainSec

Course Instructor: Pavel Yosifovich

Community/Forum: There is a Discord community

Cost: $139 (single course) – $849 (5 course bundle)

Topics:

Windows Internals: Day 1
- Windows Versions
- Core Concepts
- System Architecture
- Using WinDbg
- The SSDT
- Core System Files
- Objects and Handles
- Sessions
- System Processes
Windows Internals: Day 2
- Process Fundamentals
- Process Creation and Termination
- “Special” Process
- Jobs and Silos
- Threads Fundamentals
- Thread Scheduling
Windows Internals: Day 3
- Interrupts
- Exceptions
- System Crash
- Object Management
- Sharing Kernel Objects
- Synchronization
- More Mechanisms
Windows Internals: Day 4
- Memory Fundamentals
- Sharing and Protection
- Virtual Address Translation
- Physical Memory
- Memory Usage: User Mode
- Memory Usage: Kernel
- Memory Mapped Files
Windows Internals: Day 5
- I/O System Basics
- I/O Request Packets (IRPs)
- Devices and Drivers
- IRP Processing
- More About Drivers
- Security Fundamentals
- Security in Detail
- Securing Objects
- Other Security Features

*DFIR Diva is an affiliate of TrainSec and receives a small percentage of sales made through affiliate links that go toward keeping the site running.

Free & Affordable DFIR, OSINT, & Cybersecurity Training

Windows Internals (TrainSec)