《深入解析Windows操作系统，卷2（英文版·第6版）》是操作系统内核专家Russinovich等人的Windows操作系统原理的最新版著作，针对Windows 7和Windows Server 2008 R2进行了全面的更新，主要讲述Windows的底层关键机制、Windows的核心组件（包括进程/线程/作业，安全性，I/O系统，存储管理、内存管理、缓存管理、文件系统和网络），并分析了启动进程、关机进程以及缓存转储。书中提供了许多实例，读者可以借此更好地理解Windows的内部行为。 《深入解析Windows操作系统，卷2（英文版·第6版）》内容丰富，信息全面，适合众多Windows平台开发人员、系统管理员阅读。 目录
Windows Internals, Sixth Edition, Part(See appendix for Part 1's table of contents)Chapter 8 I/O SystemI/O System ComponentsThe I/O ManagerTypical I/O ProcessingDevice DriversTypes of Device DriversStructure of a DriverDriver Objects and Device ObjectsOpening DevicesI/O ProcessingTypes of I/OI/O Request to a Single-Layered DriverI/O Requests to Layered DriversI/O CancellationI/O Completion PortsI/O PrioritizationContainer NotificationsDriver VerifierKernel-Mode Driver Framework (KMDF)Structure and Operation of a KMDF DriverKMDF Data ModelKMDF I/O ModelUser-Mode Driver Framework (UMDF)The Plug and Play (PnP) ManagerLevel of Plug and Play SupportDriver Support for Plug and PlayDriver Loading, Initialization, and InstallationDriver InstallationThe Power ManagerPower Manager OperationDriver Power OperationDriver and Application Control of Device PowerPower Availability RequestsProcessor Power Management (PPM)ConclusionChapter 9 Storage ManagementStorage TerminologyDisk DevicesRotating Magnetic DisksSolid State DisksDisk DriversWinloadDisk Class, Port, and Miniport DriversDisk Device ObjectsPartition ManagerVolume ManagementBasic DisksDynamic DisksMultipartition Volume ManagementThe Volume NamespaceVolume I/O OperationsVirtual Disk ServiceVirtual Hard Disk SupportAttaching VHDsNested File SystemsBitLocker Drive EncryptionEncryption KeysTrusted Platform Module (TPM)BitLocker Boot ProcessBitLocker Key RecoveryFull-Volume Encryption DriverBitLocker ManagementBitLocker To GoVolume Shadow Copy ServiceShadow CopiesVSS ArchitectureVSS OperationUses in WindowsConclusionChapter 10 Memory ManagementIntroduction to the Memory ManagerMemory Manager ComponentsInternal SynchronizationExamining Memory UsageServices Provided by the Memory ManagerLarge and Small PagesReserving and Committing PagesCommit LimitLocking MemoryAllocation GranularityShared Memory and Mapped FilesProtecting MemoryNo Execute Page ProtectionCopy-on-WriteAddress Windowing ExtensionsKernel-Mode Heaps (System Memory Pools)Pool SizesMonitoring Pool UsageLook-Aside ListsHeap ManagerTypes of HeapsHeap Manager StructureHeap SynchronizationThe Low Fragmentation HeapHeap Security FeaturesHeap Debugging FeaturesPageheapFault Tolerant HeapVirtual Address Space Layoutsx86 Address Space Layoutsx86 System Address Space Layoutx86 Session SpaceSystem Page Table Entries64-Bit Address Space Layoutsx64 Virtual Addressing LimitationsDynamic System Virtual Address Space ManagementSystem Virtual Address Space QuotasUser Address Space LayoutAddress Translationx86 Virtual Address TranslationTranslation Look-Aside BufferPhysical Address Extension (PAE)x64 Virtual Address TranslationIA64 Virtual Address TranslationPage Fault HandlingInvalid PTEsPrototype PTEsIn-Paging I/OCollided Page FaultsClustered Page FaultsPage FilesCommit Charge and the System Commit LimitCommit Charge and Page File SizeStacksUser StacksKernel StacksDPC StackVirtual Address DescriptorsProcess VADsRotate VADsNUMASection ObjectsDriver VerifierPage Frame Number DatabasePage List DynamicsPage PriorityModified Page WriterPFN Data StructuresPhysical Memory LimitsWindows Client Memory LimitsWorking SetsDemand PagingLogical PrefetcherPlacement PolicyWorking Set ManagementBalance Set Manager and SwapperSystem Working SetsMemory Notification EventsProactive Memory Management (Superfetch)ComponentsTracing and LoggingScenariosPage Priority and RebalancingRobust PerformanceReadyBoostReadyDriveUnified CachingProcess ReflectionConclusionChapter 11 Cache ManagerKey Features of the Cache ManagerSingle, Centralized System CacheThe Memory ManagerCache CoherencyVirtual Block CachingStream-Based CachingRecoverable File System SupportCache Virtual Memory ManagementCache SizeCache Virtual SizeCache Working Set SizeCache Physical SizeCache Data StructuresSystemwide Cache Data StructuresPer-File Cache Data StructuresFile System InterfacesCopying to and from the CacheCaching with the Mapping and Pinning InterfacesCaching with the Direct Memory Access InterfacesFast I/ORead-Ahead and Write-BehindIntelligent Read-AheadWrite-Back Caching and Lazy WritingWrite ThrottlingSystem ThreadsConclusionChapter 12 File SystemsWindows File System FormatsCDFSUDFFAT12, FAT16, and FAT32exFATNTFSFile System Driver ArchitectureLocal FSDsRemote FSDsFile System OperationFile System Filter DriversTroubleshooting File System ProblemsProcess Monitor Basic vs Advanced ModesProcess Monitor Troubleshooting TechniquesCommon Log File SystemNTFS Design Goals and FeaturesHigh-End File System RequirementsAdvanced Features of NTFSNTFS File System DriverNTFS On-Disk StructureVolumesClustersMaster File TableFile Record NumbersFile RecordsFile NamesResident and Nonresident AttributesData Compression and Sparse FilesThe Change Journal FileIndexingObject IDsQuota TrackingConsolidated SecurityReparse PointsTransaction SupportNTFS Recovery SupportDesignMetadata LoggingRecoveryNTFS Bad-Cluster RecoverySelf-HealingEncrypting File System SecurityEncrypting a File for the First TimeThe Decryption ProcessBacking Up Encrypted FilesCopying Encrypted FilesConclusionChapter 13 Startup and ShutdownBoot ProcessBIOS PrebootThe BIOS Boot Sector and BootmgrThe UEFI Boot ProcessBooting from iSCSIInitializing the Kernel and Executive SubsystemsSmss, Csrss, and WininitReadyBootImages That Start AutomaticallyTroubleshooting Boot and Startup ProblemsLast Known GoodSafe ModeWindows Recovery Environment (WinRE)Solving Common Boot ProblemsShutdownConclusionChapter 14 Crash Dump AnalysisWhy Does Windows Crash?The Blue ScreenCauses of Windows CrashesTroubleshooting CrashesCrash Dump FilesCrash Dump GenerationWindows Error ReportingOnline Crash AnalysisBasic Crash Dump AnalysisNotmyfaultBasic Crash Dump AnalysisVerbose AnalysisUsing Crash Troubleshooting ToolsBuffer Overruns, Memory Corruption, and Special PoolCode Overwrite and System Code Write ProtectionAdvanced Crash Dump AnalysisStack TrashesHung or Unresponsive SystemsWhen There Is No Crash DumpAnalysis&
占位居中
直播中，去观看