Windows Blog Archive

653 Blog Articles

Options

3,003

MarkRussinovich on 06-27-2019 12:31 AM

First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...

3,006

MarkRussinovich on 06-27-2019 12:30 AM

First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...

2,582

MarkRussinovich on 06-27-2019 12:29 AM

First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...

1,536

MarkRussinovich on 06-27-2019 12:27 AM

First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...

4,803

MarkRussinovich on 06-27-2019 12:26 AM

First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...

1,213

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.

1,480

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...

1,272

MarkRussinovich on 06-27-2019 12:23 AM

First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...

5,067

MarkRussinovich on 06-27-2019 12:22 AM

First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...

1,403

MarkRussinovich on 06-27-2019 12:20 AM

First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...

1,415

MarkRussinovich on 06-27-2019 12:19 AM

First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...

1,888

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...

1,304

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...

1,542

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...

1,588

MarkRussinovich on 06-27-2019 12:16 AM

First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...

2,208

MarkRussinovich on 06-27-2019 12:13 AM

First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...

1,342

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...

1,305

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...

1,711

MarkRussinovich on 06-27-2019 12:11 AM

First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...

1,446

MarkRussinovich on 06-27-2019 12:10 AM

First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...

987

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...

1,520

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...

1,370

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...

1,259

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...

1,467

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...

2,540

MarkRussinovich on 06-27-2019 12:06 AM

First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...

1,716

MarkRussinovich on 06-27-2019 12:05 AM

First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...

1,369

MarkRussinovich on 06-27-2019 12:04 AM

First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...

1,317

MarkRussinovich on 06-27-2019 12:03 AM

First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...

3,612

MarkRussinovich on 06-27-2019 12:02 AM

First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...

Latest Comments

in Autopilot profile assignment using Intune on 04-27-2021

@quintenh Hey thank you. THat is exactly what I ended up doing. Only drawback is if you make a new category you have to remember to add it in. No biggie though. Cheers

1 Likes

in Autopilot profile assignment using Intune on 04-20-2021

@wcsand , yes that is possible.For one of my customers we have configured a default Autopilot profile where all Autopilot devices will be a member off without a Order ID.And we have several self deployment Autopilot profiles with an order ID, the query for the default profile looks like:(device.devi...

0 Likes

in Sony: You don’t reeeeaaaally want to uninstall, do you? on 03-14-2021

This is precious, thanks for migrating these to the new tech community site.

0 Likes

in Pushing the Limits of Windows: Handles on 02-12-2021

Is it normal for the Handles count on Windows Task Manager on the CPU tab to keep going up and up continuously? Mine seems to be going up by about 100,000 every hour. Its at 851,000 now and was only at 400,000 about two hours ago and I have not started any new programs or did anything else since I r...

0 Likes

in Autopilot profile assignment using Intune on 02-04-2021

Hey this is great but I am wondering something. How can I check the value of [orderid] but in a negated fashion. I want a group to take any devices with a blank ORDERID (where ORDERID is not specified in the CSV) field to be placed in the group.If I do (device.devicePhysicalIds -any _ -NE "[OrderID]...

0 Likes