
Download the free Kindle app and start reading Kindle books instantly on your smartphone, tablet or computer—no Kindle device required.
Read instantly on your browser with Kindle for Web.
Using your mobile phone camera, scan the code below and download the Kindle app.
Windows Internals, Part 1: System architecture, processes, threads, memory management, and more, Part 1 Paperback – 3 May 2017
You can select and apply an appropriate plan based on your cart value at checkout.
-
3-12 mo instalmentsLatitude
-
Pay at Your PaceZip
Payment options | Interest | Total* |
---|---|---|
$17.96/mo (3 mo) minimum purchase of $50 | 0% | $53.86 |
** Latitude: Monthly credit card fee (currently $10.95) will apply. Equal monthly repayments apply, account fees, late fees apply. Provider may charge interest. Exclusions apply. For more details click on Learn more above. You acknowledge that credit is provided to you by Latitude Finance Australia ABN 42 008 583 588, Australian Credit Licence number 392145, and the instalment plan is subject to the terms and conditions imposed on you by Latitude. Equal monthly repayments apply (exact amounts specified in your Latitude statement) and card fees will be charged by Latitude. If you fail to make your minimum monthly payment for two consecutive months, you agree that your equal monthly payment plans (Instalment Interest Free Promotion) with a term of fewer than 33 months will change into a minimum monthly payment plan (Interest Free Promotion) for the remaining duration of the initial plan term. If you fail to make a payment on time, Latitude will charge late fees. Latitude will also charge interest on any outstanding balance at the end of the instalment plan period you select at the rate set out in its T&Cs (currently 29.99% p.a.). Interest may also apply to other Latitude credit card transactions or if you do not comply with the Latitude T&Cs.
Account type | Interest |
---|---|
Zip Pay | Always interest free^ |
Zip Money | 12 mo interest free,
25.9% p.a. thereafter* |
^Zip Pay: This is a credit product and is interest free. Minimum monthly repayments are required. A monthly account fee of $9.95 is charged by Zip and is subject to change. Pay your closing balance in full by the due date each month and Zip will waive the fee. Available to approved applicants only and subject to completion of satisfactory credit assessment by Zip. Other charges may be payable. Fees and charges subject to change. Zip T&Cs apply. T&Cs available on application. See your Zip contract for further details. Credit provided by Zip Money Payments Pty Ltd (ABN 58 164 440 993), Australian Credit Licence Number 441878.
*Zip Money: Interest free term subject to minimum spend and promotional partner offer. Available to approved applicants only and subject to completion of satisfactory credit check. The repayment advertised will repay the transaction balance within the advertised interest free period. A monthly account fee of $9.95 applies and a one off establishment fee may apply for new customers. Under the contract, minimum monthly repayments are required and will vary depending on your credit limit. Instalment plans split eligible purchases of $300 and above into equal repayments within the interest free period. If you turn off instalments, transactions will be reverted to the minimum monthly repayment. Paying only the minimum monthly repayment may not necessarily repay a purchase within the interest free period. Any balance outstanding at the expiry of the interest free period will be charged at the standard variable interest rate, 25.9% per annum, as at 1 June 2023. Other charges may be payable, see T&Cs. Interest, fees and charges are subject to change. Terms & Conditions apply and are available on application. See your contract for further details. Credit provided by ZipMoney Payments Pty Ltd (ABN 58 164 440 993), Australian Credit Licence Number (441878).
Purchase options and add-ons
This classic guide supports Windows 10 and Windows Server 2016
Delve inside Windows architecture and internals, and see how core components work behind the scenes.
Whether you are a developer or an IT professional, you'll get critical, insider perspectives on how Windows operates. And through hands-on experiments, you'll experience its internal behaviour firsthand - knowledge you can apply to improve application design, debugging, system performance, and support.
- ISBN-100738758841
- ISBN-13978-0735684188
- Edition7th
- PublisherMicrosoft Press
- Publication date3 May 2017
- LanguageEnglish
- Dimensions18.92 x 4.7 x 22.99 cm
- Print length800 pages
Frequently bought together

Customers who viewed this item also viewed
Product description
Review
About the Author
Andrea Allievi (Greater Seattle, WA Area) is a Senior Kernel Engineer with more than 15 years of experience in the field. He works in the Windows Core OS team at Microsoft, where he designs and develops robust Windows kernel Security features. He is also active in the security research community and often speaks at conferences, including Recon and Blue Hat. He started as a Security Researcher in small Italian companies such as TgSoft and SaferBytes. He then moved to the Talos group at Cisco Systems, where his time was split between the development of anti-virus and anti-rootkit tools and security research of offensive and defensive technologies, particularly in the Windows' kernel. In that time, after the design of the first UEFI Bootkit and the bypass of the Windows 8.1 Kernel Patch Protection, he became an internationally recognised expert in the operating system's internals.
Alex Ionescu (Greater Seattle, WA Area) is a Senior Vice President of Endpoint Security at CrowdStrike, and an internationally recognised expert in low-level system software, operating system research and kernel development, security training, and reverse engineering. He teaches Windows Internals courses around the world and is active in the security research community through conference talks and bug bounty programs.
Mark E. Russinovich (Seattle, WA Area) is a Technical Fellow in the Windows Azure Group at Microsoft, focusing on the Microsoft Cloud. He is a widely recognised expert in operating systems, distributed systems, and cybersecurity. Russinovich is co-author of the popular Windows Internals series of books and Windows Sysinternals Administrator's Reference. He joined Microsoft when it acquired Winternals, a software company he co-founded in 1996. He created the popular Sysinternals tools.
David A. Solomon (Los Angeles, CA Area), coauthor of the Windows Internals book series, has taught Windows internals to thousands of developers and IT professionals worldwide, including Microsoft staff. He is a regular speaker at Microsoft conferences, including TechNet and PDC.
Product details
- ASIN : 0735684189
- Publisher : Microsoft Press
- Publication date : 3 May 2017
- Edition : 7th
- Language : English
- Print length : 800 pages
- ISBN-10 : 0738758841
- ISBN-13 : 978-0735684188
- Item weight : 1.05 kg
- Dimensions : 18.92 x 4.7 x 22.99 cm
- Book 1 of 2 : Developer Reference Windows Internals
- Best Sellers Rank: 45,903 in Books (See Top 100 in Books)
- 4 in Windows Network Administration
- 4 in Memory Management Algorithms
- 4 in Windows 10
- Customer Reviews:
About the authors
Mark Russinovich works at Microsoft as a Technical Fellow, Microsoft's senior-most technical position. He joined the company when Microsoft acquired Winternals software, which he co-founded in 1996. He is also author of the popular Sysinternals tools. He is coauthor of the Windows Internals book series, a contributing editor for TechNet Magazine, and a senior contributing editor for Windows IT Pro Magazine. He lives in Washington State with his wife, daughter, two dogs and two cats.
Discover more of the author’s books, see similar authors, read book recommendations and more.
Pavel Yosifovich is a renowned author, developer, and expert in Windows Internals, system programming, and software development. With extensive experience in low-level programming, he has authored several highly regarded books, including Windows Internals, Part 1 (7th Edition) and Windows 10 System Programming. His works provide deep insights into Windows architecture, kernel-mode development, and debugging techniques, making them essential resources for developers, security researchers, and IT professionals.
Beyond his books, Pavel is also known for his contributions to the developer community through training, blog posts, and technical talks. He offers in-depth courses on TrainSec, where students can learn Windows Internals, debugging, and system programming directly from his expertise. His writing style balances technical depth with clarity, making complex topics accessible to both beginners and experienced programmers. Whether delving into kernel drivers, Windows debugging, or modern programming languages, Pavel’s books and courses serve as authoritative guides for those looking to master Windows and programming.
I’ve been living, breathing, and training in operating systems and cybersecurity technology for almost two decades, and there’s nothing I love more. In part thanks to my ground-breaking research and wealth of Windows Internals knowledge, I am honored to have been recently recognized by the United States Government as an Alien of Extraordinary Ability, “demonstrating internationally recognized extraordinary abilities in the sciences through sustained national or international acclaim.”
As a developer, I started my career as one of the key lead kernel developers on the open source ReactOS project, and re-implemented from scratch, based on reverse engineering and black box testing, large parts of the Windows XP/2003 kernel (which was, at the time, current). Throughout that work, I uncovered dozens of vulnerabilities and just plain old bugs in the kernel and its many associated subsystems and drivers, both in user-mode and kernel-mode. I then moved on to work at Apple, Inc. where I was an intern and then part-time remote software engineer while completing my studies, and worked on the Core Platform team, where I helped port both iOS and iBoot, as well as related drivers, to exciting new platforms, ARM architectures, and SOCs, as well as worked on interesting and varied user-mode infrastructure such as SpringBoard, Mach RPC, and CoreAnimation. Finally, I joined CrowdStrike, Inc., as part of its launch team over five years ago, where I initially started as its Chief Architect, responsible for the overall vision and design of its endpoint security product, and have recently taken on a new role as the Vice President of EDR Strategy, to help cement its lead in the market and unparalleled visibility into operating system behaviors.
As a reverse engineer, I began tearing apart Windows long before my involvement with ReactOS. While now having joined the relics of GeoCities, Planet Source Code was a popular coding website where developers compete against one another to win the coveted “Superior Code Award”. Each of my 8 submissions gathered exclusively five-star reviews, and I had won the award three times by the time I moved on. My ongoing reverse engineering work and research led me to first publish at Recon in 2006 and BlackHat in 2008, followed by many more security conferences, where I have now participated in for over a decade.
Finally, as a teacher and technical writer, I first began by publishing an 125-page paper on Windows Internals on Planet Source Code, which covered key windows structures in the NT kernel, and was one of the first to leverage the use of Microsoft’s Public Symbol Files (PDB) to extract type data from the kernel. I later followed-up with an entire reverse engineering overview of the Visual Basic 6 File Format, which was used by many decompilers at the time (as well as some contracting work on the side). Finally, I eventually published a similar guide on the NTFS File Format, which greatly helped the ntfs-3g Linux Project achieve a more consistent understanding of the various data structures involved. I began giving small presentations on ReactOS and NT internals at various locations, including a presentation at Waterloo University in Canada, which eventually led to my contracting with David Solomon Expert Seminars, Inc., a real titan in the Windows Internals training world. Just as Winternals and Mark Russinovich had been acquired by Microsoft, I was contracted to “fill his shoes” (an impossible task) and began giving regular trainings at Microsoft for David, followed by a growing list of additional customers and organizations.
I now own my own consulting company, Winsider Seminars & Solutions, Inc., and continue to focus on researching, writing, and writing, about Windows. Please visit our training offerings on the site at http://www.windows-internals.com to see if our topics are of interest, or feel free to shoot me an e-mail if you have something custom in mind.
Discover more of the author’s books, see similar authors, read book recommendations and more.
Customer reviews
Top reviews from Australia
Top reviews from other countries
-
ThimoReviewed in Germany on 18 April 2024
5.0 out of 5 stars Sehr informativ
Format: PaperbackVerified PurchaseI love this book :)
Wie schon oben erwähnt, sehr informativ, jedoch ohne Vorwissen meiner Meinung nach schwer zu folgen. Besonders Erfahrungen mit Debugging sind hier hilfreich. Für die Entwicklung oder Forensik nicht so besonders.
ThimoSehr informativ
Reviewed in Germany on 18 April 2024
Wie schon oben erwähnt, sehr informativ, jedoch ohne Vorwissen meiner Meinung nach schwer zu folgen. Besonders Erfahrungen mit Debugging sind hier hilfreich. Für die Entwicklung oder Forensik nicht so besonders.
Images in this review
-
stéphanie charoyReviewed in France on 3 July 2023
5.0 out of 5 stars Beau livre
Format: PaperbackVerified PurchaseTrès beau livre qui a plu a destinataire. Attention livre en anglais.
-
Luís SousaReviewed in Belgium on 17 October 2024
5.0 out of 5 stars Três bon livre
Format: PaperbackVerified PurchaseCette fois j'ai reçu le livro en bon étai Amazon à emballé mieux le livre merci.
-
沢やReviewed in Japan on 27 October 2021
5.0 out of 5 stars 良い
Format: KindleVerified PurchaseWindows向け開発者にとってとても役に立ちます