Windows Blog Archive

653 Blog Articles

Options

2,968

MarkRussinovich on 06-27-2019 12:31 AM

First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...

2,973

MarkRussinovich on 06-27-2019 12:30 AM

First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...

2,531

MarkRussinovich on 06-27-2019 12:29 AM

First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...

1,528

MarkRussinovich on 06-27-2019 12:27 AM

First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...

4,692

MarkRussinovich on 06-27-2019 12:26 AM

First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...

1,204

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.

1,466

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...

1,257

MarkRussinovich on 06-27-2019 12:23 AM

First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...

4,991

MarkRussinovich on 06-27-2019 12:22 AM

First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...

1,385

MarkRussinovich on 06-27-2019 12:20 AM

First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...

1,389

MarkRussinovich on 06-27-2019 12:19 AM

First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...

1,858

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...

1,292

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...

1,528

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...

1,559

MarkRussinovich on 06-27-2019 12:16 AM

First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...

2,175

MarkRussinovich on 06-27-2019 12:13 AM

First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...

1,330

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...

1,289

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...

1,685

MarkRussinovich on 06-27-2019 12:11 AM

First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...

1,422

MarkRussinovich on 06-27-2019 12:10 AM

First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...

980

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...

1,480

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...

1,345

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...

1,247

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...

1,449

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...

2,519

MarkRussinovich on 06-27-2019 12:06 AM

First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...

1,705

MarkRussinovich on 06-27-2019 12:05 AM

First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...

1,354

MarkRussinovich on 06-27-2019 12:04 AM

First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...

1,307

MarkRussinovich on 06-27-2019 12:03 AM

First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...

3,571

MarkRussinovich on 06-27-2019 12:02 AM

First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...

Latest Comments

in Autopilot profile assignment using Intune on 04-27-2021

@quintenh Hey thank you. THat is exactly what I ended up doing. Only drawback is if you make a new category you have to remember to add it in. No biggie though. Cheers

0 Likes

in Autopilot profile assignment using Intune on 04-20-2021

@wcsand , yes that is possible.For one of my customers we have configured a default Autopilot profile where all Autopilot devices will be a member off without a Order ID.And we have several self deployment Autopilot profiles with an order ID, the query for the default profile looks like:(device.devi...

0 Likes

in Sony: You don’t reeeeaaaally want to uninstall, do you? on 03-14-2021

This is precious, thanks for migrating these to the new tech community site.

0 Likes

in Pushing the Limits of Windows: Handles on 02-12-2021

Is it normal for the Handles count on Windows Task Manager on the CPU tab to keep going up and up continuously? Mine seems to be going up by about 100,000 every hour. Its at 851,000 now and was only at 400,000 about two hours ago and I have not started any new programs or did anything else since I r...

0 Likes

in Autopilot profile assignment using Intune on 02-04-2021

Hey this is great but I am wondering something. How can I check the value of [orderid] but in a negated fashion. I want a group to take any devices with a blank ORDERID (where ORDERID is not specified in the CSV) field to be placed in the group.If I do (device.devicePhysicalIds -any _ -NE "[OrderID]...

0 Likes