Windows 11 Internals: Kernel Mechanisms
This course will teach you about kernel concepts and mechanisms, which form the basis of how applications and kernel drivers use the kernel’s services.
What you'll learn
The Windows kernel capabilities form the basis of what applications and other kernel components can use. In this course, Windows 11 Internals: Kernel Mechanisms, you’ll learn about the various mechanisms and capabilities implemented by the kernel. First, you’ll explore object management, and how that forms the basis of Windows functionality. Next, you’ll discover how interrupts and exceptions work, so that relevant code can be invoked when something important has occurred, such as a notification from a hardware device and what happens when Windows crashes. Finally, you’ll learn how to synchronize threads, so that you don’t get data races that can lead to data corruption or crashes, while still maintaining high efficiency. When you’re finished with this course, you’ll have the skills and knowledge of kernel mechanisms needed to understand and use kernel functionality effectively.
Table of contents
- Overview 1m
- Traps 1m
- Hardware Interrupts 3m
- Interrupt Dispatching 3m
- Demo: IDT 4m
- IRQLs 4m
- IRQL Levels 8m
- Remote Kernel Debugging 2m
- Demo: Remote Kernel Debugging 3m
- Demo: ISRs and IRQLs 7m
- Interrupt Handling Example 2m
- Inside a Typical ISR 2m
- Deferred Procedure Calls 5m
- DPC Queue 2m
- Demo: DPC Queue 7m
- Summary 2m
