What you'll learn

Security professionals often lack visibility into how Windows operates at the kernel level, limiting their ability to investigate advanced threats or understand the root cause of vulnerabilities. In this course, Introduction to Windows Kernel Exploitation, you’ll gain the ability to understand and interact with core Windows kernel components for security analysis and research. First, you’ll explore Windows NT architecture and the fundamental structures that underpin the operating system. Next, you’ll discover how to debug the Windows kernel and trace system calls from user mode into kernel mode. Finally, you’ll learn how to interact with device drivers and build simple vulnerable drivers to understand real-world attack surfaces. When you’re finished with this course, you’ll have the skills and knowledge of Windows kernel internals needed to support vulnerability analysis, incident response, and exploitation research.