Download Safari Books Online apps: Apple iOS | Android

Entire Site

Safari Books Online

    Free Trial

    Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.


    Copyright
    Presentation Slides and Transcript
    Practice Exercises
    Exercise 0: Download, setup and verify your WinDbg installation
    Exercise P1: Analysis of a normal application process dump (32-bit notepad)
    Exercise P2: Analysis of a normal application process dump (64-bit notepad)
    Exercise P3: Analysis of a normal application process dump (32-bit IE)
    Exercise P4: Analysis of an application process dump (ApplicationK, no symbols)
    Exercise P5: Analysis of an application process dump (ApplicationK, with application symbols)
    Exercise P6: Analysis of application process dump (ApplicationL, 32-bit)
    Exercise P7: Analysis of an application process dump (ApplicationL, 64-bit)
    Exercise P8: Analysis of an application process dump (ApplicationM, 32-bit)
    Exercise P9: Analysis of an application process dump (ApplicationN, 64-bit)
    Exercise P10: Analysis of an application process dump (ApplicationO, 64-bit)
    Exercise P11: Analysis of an application process dump (ApplicationP, 32-bit)
    Exercise P12: Analysis of an application process dump (ApplicationR, 32-bit)
    Exercise P13: Analysis of an application process dump (ApplicationA, 32-bit)
    Exercise P14: Analysis of an application process dump (ApplicationS, 32-bit)
    Exercise K1: Analysis of a normal kernel dump (32-bit)
    Exercise K2: Analysis of a kernel dump with pool leak (32-bit)
    Exercise K3: Analysis of a kernel dump with pool corruption (32-bit)
    Exercise K4: Analysis of a kernel dump with code corruption (32-bit)
    Exercise K5: Analysis of a kernel dump with hang I/O (32-bit)
    Exercise C1: Analysis of a normal complete dump (32-bit)
    Exercise C2: Analysis of a problem complete dump (32-bit)
    Application Source Code
    Selected Q&A
    • Create BookmarkCreate Bookmark
    • Create Note or TagCreate Note or Tag
    • DownloadDownload
    • PrintPrint
    Share this Page URL
    Help

    Practice Exercises > Exercise K4: Analysis of a kernel dump with code corruptio...

    Exercise K4: Analysis of a kernel dump with code corruption (32-bit)



    Goal: Learn how to check hooked or invalid code and kernel raw stack.


      

    You are currently reading a PREVIEW of this book.

                                                                                            

    Get instant access to over
    $1 million worth of books and videos.

      

    Start a Free Trial