[Udemy] Windows Internals: Architecture, Processes & Execution [2/2026, ENG] [TorrentX]

Windows Internals: Architecture, Processes & ExecutionГод выпуска: 2/2026 Производитель: Udemy Сайт производителя: https://www.udemy.com/course/windows-internals/ Автор: B Karthik Продолжительность: 2h 56m Тип раздаваемого материала: Видеоурок Язык: Английский Описание: This course takes you deep into the inner workings of the Windows operating system, designed for security researchers, reverse engineers, penetration testers, malware analysts, and system developers who want a complete understanding beyond surface-level knowledge. It begins with an introduction to WinDbg, teaching you how to navigate and analyze Windows systems effectively, then moves into Windows architecture, process execution, and kernel structures. From there you dive into PE (Portable Executable) file internals, learning how Windows executables are structured and loaded into memory.The course also covers process and thread management, showing how Windows handles execution flows and multitasking at a low level; objects and handles, explaining how Windows manages system resources and access; system calls, including how applications interact with the kernel; security tokens for understanding access control and permissions; and finally interrupts and exceptions, exploring how Windows handles errors and system events at the core level. By the end, you will have a strong theoretical and practical understanding of Windows internals, enabling you to analyze, debug, and understand Windows behavior like a professional, with the knowledge needed for reverse engineering, malware analysis, system programming, and advanced security research. Содержание 1 - Introduction 1. Introduction (02:55)2 - Introduction to WinDbg 2. Introduction (01:29) 3. What Is a Debugger (00:55) 4. Understanding the WinDbg Interface (02:18) 5. WinDbg Symbols (02:06) 6. Connecting a Virtual Machine for Kernel Debugging (05:01) 7. Understanding CPU Registers in WinDbg (01:07) 8. Some Essential WinDbg Commands (03:04)3 - Windows Architecture 9. Windows Operating System Architecture (05:21) 10. Function Call Flow in Windows (01:38)4 - PE (Portable Executable) Internals 11. Introduction to PE Internals (01:16) 12. DOS Header and DOS Stub (04:42) 13. NT Headers File Header and Optional Header (06:13) 14. Import Address Table (IAT) (03:47) 15. Export Address Table (EAT) (04:21) 16. PE Section Headers (06:43)5 - Process Internals 17. Introduction to Processes (01:52) 18. What Is a Process in Windows (04:33) 19. EPROCESS and KPROCESS Kernel Structures (07:47) 20. Process Environment Block (PEB) (07:24) 21. Windows Process Creation From API Call to Running Process (18:42)6 - Thread 22. Introduction to Threads (06:00) 23. ETHREAD and KTHREAD Kernel Structures (07:54) 24. Windows Thread Creation From API Call to Execution (13:48) 25. Context Switching (03:20)