Windows Blog Archive

653 Blog Articles

Options

2,923

MarkRussinovich on 06-27-2019 12:31 AM

First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...

2,929

MarkRussinovich on 06-27-2019 12:30 AM

First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...

2,480

MarkRussinovich on 06-27-2019 12:29 AM

First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...

1,507

MarkRussinovich on 06-27-2019 12:27 AM

First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...

4,578

MarkRussinovich on 06-27-2019 12:26 AM

First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...

1,189

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.

1,442

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...

1,241

MarkRussinovich on 06-27-2019 12:23 AM

First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...

4,878

MarkRussinovich on 06-27-2019 12:22 AM

First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...

1,369

MarkRussinovich on 06-27-2019 12:20 AM

First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...

1,367

MarkRussinovich on 06-27-2019 12:19 AM

First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...

1,834

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...

1,278

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...

1,511

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...

1,540

MarkRussinovich on 06-27-2019 12:16 AM

First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...

2,096

MarkRussinovich on 06-27-2019 12:13 AM

First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...

1,316

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...

1,276

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...

1,664

MarkRussinovich on 06-27-2019 12:11 AM

First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...

1,400

MarkRussinovich on 06-27-2019 12:10 AM

First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...

964

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...

1,441

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...

1,319

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...

1,233

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...

1,415

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...

2,484

MarkRussinovich on 06-27-2019 12:06 AM

First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...

1,684

MarkRussinovich on 06-27-2019 12:05 AM

First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...

1,339

MarkRussinovich on 06-27-2019 12:04 AM

First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...

1,291

MarkRussinovich on 06-27-2019 12:03 AM

First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...

3,467

MarkRussinovich on 06-27-2019 12:02 AM

First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...

Latest Comments

in Autopilot profile assignment using Intune on 04-20-2021

@wcsand , yes that is possible.For one of my customers we have configured a default Autopilot profile where all Autopilot devices will be a member off without a Order ID.And we have several self deployment Autopilot profiles with an order ID, the query for the default profile looks like:(device.devi...

0 Likes

in Sony: You don’t reeeeaaaally want to uninstall, do you? on 03-14-2021

This is precious, thanks for migrating these to the new tech community site.

0 Likes

in Pushing the Limits of Windows: Handles on 02-12-2021

Is it normal for the Handles count on Windows Task Manager on the CPU tab to keep going up and up continuously? Mine seems to be going up by about 100,000 every hour. Its at 851,000 now and was only at 400,000 about two hours ago and I have not started any new programs or did anything else since I r...

0 Likes

in Autopilot profile assignment using Intune on 02-04-2021

Hey this is great but I am wondering something. How can I check the value of [orderid] but in a negated fashion. I want a group to take any devices with a blank ORDERID (where ORDERID is not specified in the CSV) field to be placed in the group.If I do (device.devicePhysicalIds -any _ -NE "[OrderID]...

0 Likes

in The Machine SID Duplication Myth (and Why Sysprep Matters) on 01-06-2021

You have indicated that SysPrep does not always work when programs have been installed. Can you elaborate. I need to build a complete working machine and then sysprep and generalize it to be used for multiple deployments. I normally install all MS Office products, plus Vision and Project. Their lice...

0 Likes