Windows Blog Archive

653 Blog Articles

Options

2,716

MarkRussinovich on 06-27-2019 12:31 AM

First published on TechNet on Apr 18, 2015 We all know people, friends and family, that have fallen for the “your system...

2,637

MarkRussinovich on 06-27-2019 12:30 AM

First published on TechNet on Jan 02, 2013 Scareware, a type of malware that mimics antimalware software, has been aroun...

2,278

MarkRussinovich on 06-27-2019 12:29 AM

First published on TechNet on Oct 28, 2012 A key part of any cybersecurity plan is “continuous monitoring”, or enabling ...

1,397

MarkRussinovich on 06-27-2019 12:27 AM

First published on TechNet on Aug 22, 2012 Windows Azure’s compute platform, which includes Web Roles, Worker Roles, and...

3,996

MarkRussinovich on 06-27-2019 12:26 AM

First published on TechNet on Jul 01, 2012 This case is my favorite kind of case, one where I use my own tools to solve ...

1,086

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on May 06, 2012 Many of you have read Zero Day, my first novel.

1,332

MarkRussinovich on 06-27-2019 12:24 AM

First published on TechNet on Jan 03, 2012 As a reader of this blog I suspect that you, like me, are the IT support staf...

1,153

MarkRussinovich on 06-27-2019 12:23 AM

First published on TechNet on Nov 27, 2011 This case unfolds with a network administrator charged with the rollout of th...

4,297

MarkRussinovich on 06-27-2019 12:22 AM

First published on TechNet on Nov 06, 2011 Disk cloning has become common as IT professionals virtualize physical server...

1,274

MarkRussinovich on 06-27-2019 12:20 AM

First published on TechNet on Oct 02, 2011 This case opens when a Sysinternals power user, who also works as a system ad...

1,262

MarkRussinovich on 06-27-2019 12:19 AM

First published on TechNet on Jul 18, 2011 I love the cases people send me where the Sysinternals tools have helped them...

1,695

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Jul 03, 2011 Aaron Margosis and I are thrilled to announce that the long awaited, and some...

1,186

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on May 03, 2011 I just got back the finished version of the video trailer for my new cyber th...

1,399

MarkRussinovich on 06-27-2019 12:18 AM

First published on TechNet on Apr 17, 2011 In the first post of this series, I used Autoruns, Process Explorer and VMMap...

1,387

MarkRussinovich on 06-27-2019 12:16 AM

First published on TechNet on Apr 15, 2011 In Part 1 I began my investigation of an example infection of the infamous St...

1,848

MarkRussinovich on 06-27-2019 12:13 AM

First published on TechNet on Mar 26, 2011 Though I didn’t realize what I was seeing, Stuxnet first came to my attention...

1,231

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 I’m excited to announce that my first novel, a cyber thriller entitled Zero D...

1,179

MarkRussinovich on 06-27-2019 12:12 AM

First published on TechNet on Mar 13, 2011 This post continues in the malware hunting theme of the last couple of posts ...

1,525

MarkRussinovich on 06-27-2019 12:11 AM

First published on TechNet on Mar 06, 2011 Continuing the theme of focusing on malware-related cases (last week I posted...

1,268

MarkRussinovich on 06-27-2019 12:10 AM

First published on TechNet on Feb 26, 2011 Given that my novel, Zero Day, will be published in a few weeks and is based ...

885

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 18, 2011 You’ve seen the news if you’re my friend on Facebook, follow me on Twitter, o...

1,228

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Jan 09, 2011 My last blog post described how to use local kernel debugging to change the c...

1,192

MarkRussinovich on 06-27-2019 12:09 AM

First published on TechNet on Dec 13, 2010 Note: for an easier way to customize the blue screen’s colors, see my next bl...

1,138

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 12, 2010 My last couple of posts have looked at the lighter side of blue screens by sh...

1,258

MarkRussinovich on 06-27-2019 12:07 AM

First published on TechNet on Dec 06, 2010 If you’ve seen one of my Case of the Unexplained presentations (like the one ...

2,266

MarkRussinovich on 06-27-2019 12:06 AM

First published on TechNet on Oct 09, 2010 When Dave Solomon and I were writing the 3rd edition of the Windows Internals...

1,541

MarkRussinovich on 06-27-2019 12:05 AM

First published on TechNet on Aug 21, 2010 This case was shared with me by a friend of mine, Andrew Richards, a Microsof...

1,242

MarkRussinovich on 06-27-2019 12:04 AM

First published on TechNet on Jun 01, 2010 While I long for the day when I no longer experience the effects of buggy sof...

1,194

MarkRussinovich on 06-27-2019 12:03 AM

First published on TechNet on Apr 12, 2010 The most interesting cases I receive are those that demonstrate a unique trou...

2,977

MarkRussinovich on 06-27-2019 12:02 AM

First published on TechNet on Mar 31, 2010 Last time, I covered the limits and how to measure usage of one of the two ke...

Latest Comments

in Pushing the Limits of Windows: Handles on 02-12-2021

Is it normal for the Handles count on Windows Task Manager on the CPU tab to keep going up and up continuously? Mine seems to be going up by about 100,000 every hour. Its at 851,000 now and was only at 400,000 about two hours ago and I have not started any new programs or did anything else since I r...

0 Likes

in Autopilot profile assignment using Intune on 02-04-2021

Hey this is great but I am wondering something. How can I check the value of [orderid] but in a negated fashion. I want a group to take any devices with a blank ORDERID (where ORDERID is not specified in the CSV) field to be placed in the group.If I do (device.devicePhysicalIds -any _ -NE "[OrderID]...

0 Likes

in The Machine SID Duplication Myth (and Why Sysprep Matters) on 01-06-2021

You have indicated that SysPrep does not always work when programs have been installed. Can you elaborate. I need to build a complete working machine and then sysprep and generalize it to be used for multiple deployments. I normally install all MS Office products, plus Vision and Project. Their lice...

0 Likes

in Get free, hands-on experience with Windows 10 virtual labs on 12-24-2020

need the requirement access to my account

0 Likes

in More on Sony: Dangerous Decloaking Patch, EULAs and Phoning Home on 11-24-2020

thanks for posting these, it's good to know the history behind sony and what they did. i for one never knew any of this

0 Likes