
|

|
 |
GOC7 - Windows Internals & Advanced Troubleshooting
This course is intended for IT consultants, developers and administrators who are interested in low-level functionality of the Windows operating system. It provides students with detailed description of the internal architecture, reveals functionality of subsystems and shows the way the system processes run. Overall explanation of memory management, threads, processes, I/O subsystem and storage concepts is provided as well. Students will also gain experience using diagnostic tools and learn how to solve problems of the operating system startup, drivers malfunction and application crashes.
Who the course is forThe course is intended for experienced administrators of Windows NT family of operating system such as Windows 2000, XP, Vista, 2003 and 2008What we teach youWe will teach you how to understand the Windows Internals the way you will never ever want to use any other operating system.Required skillsBasic work with Windows XP/2000/Server 2003 platform, network technologies summary and their configuration to Windows.Teaching methodsInstructor–led classroom training with practical demonstrations and excercises on computers in a virtual environmentTeaching materialsPrinted PowerPoint presentations and the original Windows Internals book.Course syllabusTopic overview
History and evolution of Windows NT
Windows 2000 overview
Changes in Windows XP/2003
Related tools
Support Tools
Resource Kits
SDK’s
Kernel Debuggers
Sysinternal’s free tools
Operating system architecture
Basic concept
Architecture overview
Main subsystems (Win32,Posix,OS/2 …)
Kernel–mode components
Operating system threads/processes
Interrupt requests management & DPC
Processes, threads and time synchronization
Process, thread and job
Starting, finishing and collapse of process
Priorities
Time synchronization of threads
Priorities adjustment
Environment of multiprocessing
Memory Management
Virtual memory – arrangement (2G,3G,64–bit, PAE)
Paging file
Virtual Address Translation
Page fault handling (Hard, Soft)
Working Set
Physical memory
Management
Win32 services
Registry
WMI
Security
Security Ratings
Security Components
Object Protection
Auditing, Impersonation and Privileges
I/O System
I/O System Components
Drivers installation
Kinds of drivers
Driver Operation
Plug–and–Play Manager
Power Manager
Storage
SCSIPort drivers
Storport drivers
iSCSI drivers
Partitioning
File systems
NTFS I/O
NTFS features
NTFS on–disk structures
Backup & Restore Technologies
Volume Shadow Copy Service
Cache Manager
Cache Virtual Structure
Cache Size
Cache Operation
Startup, shutdown and system crashes
Startup process
Prefetch mechanisms
Logon process
Shutdown
System Restore
Last Known Good
Safe Mode
Recovery Console
ERD Commander
Crashes
Crash dump files analysis
On–line Crash Analysis
Driver Verifier
Solving problems
Usage of system auditing
Performance monitor & Task Manager
Process Explorer
Filemon and Regmon tools
Autoruns
Tdimon,Tcpview
Load order
PS Tools suite
Recommended prior courses
MOC 6419 - Windows Server 2008 – Configuring, Managing and Maintaining Windows Server 2008 Servers
Recommended subsequent courses
GOC11 - Windows Storage Internals & Troubleshooting
GOC12 - Microsoft Windows – Applications Troubleshooting & Fighting Malware
Catalog price of course and handbook
| Praha |
19500 Kč
|
1700 Kč
|
50 items
|
| Brno |
19000 Kč
|
1700 Kč
|
50 items
|
Course dates
|