Windows Blog Archive

653 Blog Articles

Options

3,169

MarkRussinovich on Jun 27 2019 12:31 AM

First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...

3,199

MarkRussinovich on Jun 27 2019 12:30 AM

First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...

2,749

MarkRussinovich on Jun 27 2019 12:29 AM

First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...

1,634

MarkRussinovich on Jun 27 2019 12:27 AM

First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...

5,509

MarkRussinovich on Jun 27 2019 12:26 AM

First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...

1,278

MarkRussinovich on Jun 27 2019 12:24 AM

First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.

1,551

MarkRussinovich on Jun 27 2019 12:24 AM

First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...

1,336

MarkRussinovich on Jun 27 2019 12:23 AM

First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...

5,641

MarkRussinovich on Jun 27 2019 12:22 AM

First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...

1,468

MarkRussinovich on Jun 27 2019 12:20 AM

First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...

1,495

MarkRussinovich on Jun 27 2019 12:19 AM

First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...

2,003

MarkRussinovich on Jun 27 2019 12:18 AM

First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...

1,360

MarkRussinovich on Jun 27 2019 12:18 AM

First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...

1,633

MarkRussinovich on Jun 27 2019 12:18 AM

First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...

1,721

MarkRussinovich on Jun 27 2019 12:16 AM

First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...

2,423

MarkRussinovich on Jun 27 2019 12:13 AM

First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...

1,407

MarkRussinovich on Jun 27 2019 12:12 AM

First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...

1,372

MarkRussinovich on Jun 27 2019 12:12 AM

First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...

1,829

MarkRussinovich on Jun 27 2019 12:11 AM

First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...

1,554

MarkRussinovich on Jun 27 2019 12:10 AM

First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...

1,031

MarkRussinovich on Jun 27 2019 12:09 AM

First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...

1,820

MarkRussinovich on Jun 27 2019 12:09 AM

First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...

1,486

MarkRussinovich on Jun 27 2019 12:09 AM

First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...

1,326

MarkRussinovich on Jun 27 2019 12:07 AM

First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...

1,609

MarkRussinovich on Jun 27 2019 12:07 AM

First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...

2,771

MarkRussinovich on Jun 27 2019 12:06 AM

First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...

1,805

MarkRussinovich on Jun 27 2019 12:05 AM

First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...

1,450

MarkRussinovich on Jun 27 2019 12:04 AM

First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...

1,383

MarkRussinovich on Jun 27 2019 12:03 AM

First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...

3,922

MarkRussinovich on Jun 27 2019 12:02 AM

First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...

Latest Comments

in What is Windows Update for Business? on Jul 06 2021 12:21 PM

@Ronald Harper please check out Windows Update for Business (Windows 10) - Windows Deployment | Microsoft Docs or our recent learning path on Windows Update for Business: https://docs.microsoft.com/learn/modules/m365-windows-manage-cloud-device-updates Best, Aria

0 Likes

in Microsoft Update Catalog site updated on Jul 02 2021 09:31 AM

ONE DRIVE NOT INSTALLED. HOW TO SOLVE THIS PROBLEM

0 Likes

in Pushing the Limits of Windows: Handles on Jun 19 2021 06:58 AM

but is there some way to get a list of all processes to try and find which process is doing this? Wish there was a "Handle Count" column option beside Processes in main Process Explorer list so I could sort and see.You can ask Task Manager to display the # Handles of each process. Makes diagnosing t...

0 Likes

in The Machine SID Duplication Myth (and Why Sysprep Matters) on Jun 16 2021 09:53 AM

What do the security tools like Sentinel, etc. use for uniquely identifying host entities? Are non-domain Windows instances in Azure processed with Sysprep to generate unique SIDs? Computer SIDs would seem like a good option as they can be enumerated by interrogating AD in a domain, and the results ...

0 Likes

in Encoding sensitive information in CustomSettings.ini and Bootstrap.ini on Jun 03 2021 04:54 PM

Very informative post, was wondering how can this concept be scaled to secure a password in customSettings.INI when its used for a database lookup, sample file: [Settings] Priority=CSettings, Default Properties=OSInstall, DomainNetBiosName, TimeZoneName,CustomProperty1,CustomProperty2 [Default] OSIn...

0 Likes