Mark E. Russinovich - Troubleshooting with the Windows Sysinternals Tools
Here you can read online Mark E. Russinovich - Troubleshooting with the Windows Sysinternals Tools full text of the book (entire story) in english for free. Download pdf and epub, get meaning, cover and reviews about this ebook. year: 2016, publisher: Microsoft Press, genre: Computer. Description of the work, (preface) as well as reviews are available. Best literature library LitArk.com created for fans of good reading and offers a wide selection of genres:
Romance novel
Science fiction
Adventure
Detective
Science
History
Home and family
Prose
Art
Politics
Computer
Non-fiction
Religion
Business
Children
Humor
Choose a favorite category and find really read worthwhile books. Enjoy immersion in the world of imagination, feel the emotions of the characters or learn something new for yourself, make an fascinating discovery.
- Book:Troubleshooting with the Windows Sysinternals Tools
- Author:
- Publisher:Microsoft Press
- Genre:
- Year:2016
- Rating:3 / 5
- Favourites:Add to favourites
- Your mark:
Troubleshooting with the Windows Sysinternals Tools: summary, description and annotation
We offer to read an annotation, description, summary or preface (depends on what the author of the book "Troubleshooting with the Windows Sysinternals Tools" wrote himself). If you haven't found the necessary information about the book — write in the comments, we will try to find it.
Optimize Windows system reliability and performance with Sysinternals
IT pros and power users consider the free Windows Sysinternals tools indispensable for diagnosing, troubleshooting, and deeply understanding the Windows platform. In this extensively updated guide, Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis help you use these powerful tools to optimize any Windows systems reliability, efficiency, performance, and security. The authors first explain Sysinternals capabilities and help you get started fast. Next, they offer in-depth coverage of each major tool, from Process Explorer and Process Monitor to Sysinternals security and file utilities. Then, building on this knowledge, they show the tools being used to solve real-world cases involving error messages, hangs, sluggishness, malware infections, and much more.
Windows Sysinternals creator Mark Russinovich and Aaron Margosis show you how to:
- Use Process Explorer to display detailed process and system information
- Use Process Monitor to capture low-level system events, and quickly filter the output to narrow down root causes
- List, categorize, and manage software that starts when you start or sign in to your computer, or when you run Microsoft Office or Internet Explorer
- Verify digital signatures of files, of running programs, and of the modules loaded in those programs
- Use Autoruns, Process Explorer, Sigcheck, and Process Monitor features that can identify and clean malware infestations
- Inspect permissions on files, keys, services, shares, and other objects
- Use Sysmon to monitor security-relevant events across your network
- Generate memory dumps when a process meets specified criteria
- Execute processes remotely, and close files that were opened remotely
- Manage Active Directory objects and trace LDAP API calls
- Capture detailed data about processors, memory, and clocks
- Troubleshoot unbootable devices, file-in-use errors, unexplained communication, and many other problems
- Understand Windows core concepts that arent well-documented elsewhere
Mark E. Russinovich: author's other books
Who wrote Troubleshooting with the Windows Sysinternals Tools? Find out the surname, the name of the author of the book and a list of all author's works by series.
Troubleshooting with the Windows Sysinternals Tools — read online for free the complete book (whole text) full work
Below is the text of the book, divided by pages. System saving the place of the last page read, allows you to conveniently read the book "Troubleshooting with the Windows Sysinternals Tools" online for free, without having to search again every time where you left off. Put a bookmark, and you can go to the page where you finished reading at any time.
Font size:
Interval:
Bookmark:
Mark Russinovich
Aaron Margosis
PUBLISHED BY
Microsoft Press
A division of Microsoft Corporation
One Microsoft Way
Redmond, Washington 98052-6399
Copyright 2016 by Mark Russinovich and Aaron Margosis
All rights reserved. No part of the contents of this book may be reproduced or transmitted in any form or by any means without the written permission of the publisher.
Library of Congress Control Number: 2014951871
ISBN: 978-0-7356-8444-7
Printed and bound in the United States of America.
First Printing
Microsoft Press books are available through booksellers and distributors worldwide. If you need support related to this book, email Microsoft Press Support at .
This book is provided as-is and expresses the authors views and opinions. The views, opinions and information expressed in this book, including URL and other Internet website references, may change without notice.
Some examples depicted herein are provided for illustration only and are fictitious. No real association or connection is intended or should be inferred.
Microsoft and the trademarks listed at http://www.microsoft.com on the Trademarks webpage are trademarks of the Microsoft group of companies. All other marks are property of their respective owners.
Acquisitions Editor: Devon Musgrave
Developmental Editor: Carol Dillingham
Project Editor: Carol Dillingham
Editorial Production: Waypoint Press
Technical Reviewer: Christophe Nasarre; Technical review services provided by Content Master, a member of CM Group, Ltd.
Copyeditor: Roger LeBlanc
Indexer: Christina Palaia
Cover: Twist Creative Seattle
The arrival of a new edition of Troubleshooting with the Windows Sysinternals Tools is always a treat, and when mine arrived at my country estate in Scotland, I prepared myself for a ride as exciting as my first time flying. Now, I understand that, to non-magical people (we call them Sysintuggles), it appears, against all comprehension, that the authors were trying to solve the problem of why dont people read instruction manuals more often? and stumbled across the baffling conclusion of because those pamphlets are simply too small. (And they have overachieved on solving that problem, producing a volume large enough to defend against even the most vicious lycanthrope.) But they simply dont understand the magic that this work unlocks.
I settled in to have a read. Upon stroking the spine of this book, it opened placidly and I began to flip through it. This is a spell book of the highest quality, designed with practical magic in mind. Paired with the theory in Windows Internals, youll be equipped with the finest magical education available today. Using the potions and incantations included herein, its possible to do truly remarkable things. It can teach you to bewitch Windows and ensnare malware. It can tell you how to bottle insight, brew troubleshooting glory, and even put a stopper in bluescreens. I started annotating my book, dog-earing it, and writing related spells in the margins, and soon I had an indispensable resource. It has an honored spot on my bookshelf.
This is a powerful resource for doing truly advanced magic. If you are responsible for system administration anywhere, large or small, you have something to learn from this book. Professor Russinovich truly is the brightest wizard of his age, and he and his house-elf have created an indispensable work.
A Noted Person
May 2016
The Sysinternals Suite is a set of over 70 advanced diagnostic and troubleshooting utilities for the Microsoft Windows platform written by meMark Russinovichand Bryce Cogswell. Since Microsofts acquisition of Sysinternals in 2006, these utilities have been available for free download from Microsofts Windows Sysinternals website (part of Microsoft TechNet).
The goal of this book is to familiarize you with the Sysinternals utilities and help you understand how to use them to their fullest. The book will also show you examples of how I and other Sysinternals users have leveraged the utilities to solve real problems on Windows systems.
Although I coauthored this book with Aaron Margosis, the book is written as if I am speaking. This is not at all a comment on Aarons contribution to the book; without his hard work, this book would not exist.
Note
See the section later in this chapter for updates that occurred as we were going to publish.
This book describes all of the Sysinternals utilities that are available on the Windows Sysinternals website (http://technet.microsoft.com/en-us/sysinternals/default.aspx) and all of their features as of the time of this writing (early summer, 2016). However, Sysinternals is highly dynamic: existing utilities regularly gain new capabilities, and new utilities are introduced from time to time. (To keep up, follow the RSS feed of the Sysinternals Site Discussion blog: http://blogs.technet.microsoft.com/sysinternals/.) So, by the time you read this book, some parts of it might already be out of date. That said, you should always keep the Sysinternals utilities updated to take advantage of new features and bug fixes.
This book does not cover Sysinternals utilities that have been deprecated and are no longer available on the Sysinternals site. If you are still using RegMon (Registry Monitor) or FileMon (File Monitor), you should replace them with Process Monitor, described in . Rootkit Revealer, one of the computer industrys first rootkit detectors (and the tool that discovered the Sony rootkit), has served its purpose and has been retired. Similarly, a few other utilities (such as Newsid and EfsDump) that used to provide unique value have been retired because either they were no longer needed or `equivalent functionality was eventually added to Windows.
The first Sysinternals utility I wrote, Ctrl2cap, was born of necessity. Before I started using Windows NT in 1995, I mostly used UNIX systems, which have keyboards that place the Ctrl key where the Caps Lock key is on standard PC keyboards. Rather than adapt to the new layout, I set out to learn about Windows NT device driver development and to write a driver that converts Caps Lock key presses into Ctrl key presses as they make their way from the keyboard into the Windows NT input system. Ctrl2cap is still posted on the Sysinternals site today, and I still use it on all my systems.
Ctrl2cap was the first of many tools I wrote to learn about the way Windows NT works under the hood while at the same time providing some useful functionality. The next tool I wrote, NTFSDOS, I developed with Bryce Cogswell. I had met Bryce in graduate school at Carnegie Mellon University, and we had written several academic papers together and worked on a startup project where we developed software for Windows 3.1. I pitched the idea of a tool that would allow users to retrieve data from an NTFS-formatted partition by using the ubiquitous DOS floppy. Bryce thought it would be a fun programming challenge, and we divided up the work and released the first version about a month later.
I also wrote the next two tools, Filemon and Regmon, with Bryce. These three utilitiesNTFSDOS, Filemon, and Regmonbecame the foundation for Sysinternals. Filemon and Regmon, both of which we released for Windows 95 and Windows NT, showed file system and registry activity, becoming the first tools anywhere to do so and making them indispensable troubleshooting aids.
Font size:
Interval:
Bookmark:
Similar books «Troubleshooting with the Windows Sysinternals Tools»
Look at similar books to Troubleshooting with the Windows Sysinternals Tools. We have selected literature similar in name and meaning in the hope of providing readers with more options to find new, interesting, not yet read works.
Discussion, reviews of the book Troubleshooting with the Windows Sysinternals Tools and just readers' own opinions. Leave your comments, write what you think about the work, its meaning or the main characters. Specify what exactly you liked and what you didn't like, and why you think so.