EDN Admin
Well-known member
Mark Russinovich joins Andrew Richards and Larry Larsen on this episode of Defrag Tools to talk about the history of Sysinternals , his involvement with the Windows Internals book series and advice on Cybersecurity. Learn about new tools, retired tools and tools that never got completed. Get advice on troubleshooting. Get advice on how to survive a cyber attack. And much much more... Write a comment before 24th Sept. for a chance to win a signed copy of http://www.russinovich.com/books/trojan-horse/ Trojan Horse ! Blog:
Marks Blog (TechNet) - http://blogs.technet.com/b/markrussinovich/ http://blogs.technet.com/b/markrussinovich/
Marks Web Site - http://www.russinovich.com/ http://www.russinovich.com/
Sysinternals Web Site - http://www.sysinternals.com/ http://www.sysinternals.com Videos:
All of Marks http://channel9.msdn.com/Tags/mark+russinovich videos on Channel 9 and http://channel9.msdn.com/Events/Speakers/Mark+Russinovich talks + http://channel9.msdn.com/Events/Speakers/Mark-Russinovich talks at conferences. Of note:
* http://channel9.msdn.com/search?term=Case+of+the+Unexplained Case of the Unexplained...
* Mysteries of Memory Management Revealed - http://channel9.msdn.com/Events/TechEd/NorthAmerica/2011/WCL405 Part 1 , http://channel9.msdn.com/Events/TechEd/NorthAmerica/2011/WCL406 Part 2
* http://channel9.msdn.com/search?term=Malware+Hunting+with+the+Sysinternals+Tools Malware Hunting with the Sysinternals Tools
* http://365.rsaconference.com/community/archive/usa/blog/2012/03/15/video-rsac-us-2012-rsa-conference-2012--zero-day-a-non-fiction-view--mark-russinovich RSA Conference 2012 -- Zero Day: A Non-Fiction View
* http://channel9.msdn.com/shows/Going+Deep/Mark-Russinovich-Inside-Windows-7/ Inside Windows 7
* http://channel9.msdn.com/Shows/Going+Deep/Mark-Russinovich-Inside-Windows-7-Redux Inside Windows 7 Redux
* http://channel9.msdn.com/Events/TechEd/NorthAmerica/2010/WCL404 Windows 7 and Windows Server 2008 R2 Kernel Changes
* http://channel9.msdn.com/Shows/Going+Deep/Mark-Russinovich-On-Working-at-Microsoft-Windows-Server-2008-Kernel-MinWin-vs-ServerCore-HyperV Windows Vista and Windows Server 2008 Kernel Changes Books:
http://www.russinovich.com/books/windows-sysinternals-administrators-reference/ Sysinternals Administrators Reference - [ http://www.amazon.com/Windows-Sysinternals-Administrators-Reference-Russinovich/dp/073565672X Amazon ]
http://technet.microsoft.com/en-us/sysinternals/bb963901.aspx Windows Internals books:
* http://www.russinovich.com/books/windows-internals-4/ 4th Edition - Windows XP and Windows Server 2003 - [ http://www.amazon.com/Microsoft-Windows-Internals-4th-Edition/dp/B002DMJTXM Amazon ]
* http://www.russinovich.com/books/windows-internals-5/ 5th Edition - Windows Vista and Windows Server 2008 - [ http://www.amazon.com/Windows%C2%AE-Internals-Including-Windows-Developer/dp/0735625301 Amazon ]
* http://www.russinovich.com/books/windows-internals-6/ 6th Edition - Windows 7 and Windows Server 2008 R2 - [Amazon: http://www.amazon.com/Windows-Internals-Part-Covering-Server/dp/0735648735 Part 1 , http://www.amazon.com/Windows-Internals-Part-Covering-Server/dp/0735648735 Part 2 ]
Cybersecurity novels:
* http://www.russinovich.com/books/zero-day/ Zero Day - A Novel - [ http://www.amazon.com/Zero-Day-Novel-Mark-Russinovich/dp/1250007305 Amazon ]
* http://www.russinovich.com/books/trojan-horse/ Trojan Horse - A Novel - [ http://www.amazon.com/Zero-Day-Novel-Mark-Russinovich/dp/1250007305 Amazon ]
* http://www.russinovich.com/books/operation-desolation/ Operation Desolation - A Short Story - [ http://www.amazon.com/Operation-Desolation-Case-Defacement-ebook/dp/B0080K37P2 Amazon ] Timeline:
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=00m00s [00:00] - How did Sysinternals start?
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=02m20s [02:20] - Tools that never got released and tool retirement
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=03m55s [03:55] - The most complex tool - http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx Process Explorer
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=04m51s [04:51] - Favorite tool - http://technet.microsoft.com/en-us/sysinternals/bb897434.aspx ZoomIt
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=07m01s [07:01] - Windows Internals books
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=10m54s [10:54] - Whats the best way to learn how to troubleshoot?
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=12m47s [12:47] - Do traditional techniques work when analyzing viruses?
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=13m49s [13:49] - Cybersecurity awareness
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=14m40s [14:40] - Cybersecurity novels
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=16m28s [16:28] - Cybersecurity advice for corporations and individuals
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=20m25s [20:25] - White Listing
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=22m53s [22:53] - User Account Control (UAC)
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=29m55s [29:55] - Winternals vs Sysinternals vs Windows Internals
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=31m08s [31:08] - New Windows 8 http://blogs.technet.com/b/sysinternals/rss.aspx features/support in the Sysinternals tools:
* http://technet.microsoft.com/en-us/sysinternals/bb896653 Process Explorer v15.1
* http://technet.microsoft.com/en-us/sysinternals/bb896645 Process Monitor v3.0
* http://technet.microsoft.com/en-us/sysinternals/dd996900.aspx ProcDump v5.0
* http://technet.microsoft.com/en-us/sysinternals/ff700229 RAMMap v1.2
* http://technet.microsoft.com/en-us/sysinternals/bb896647 DebugView v4.78
* http://technet.microsoft.com/en-us/sysinternals/bb664922 AccessChk v5.1
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=33m57s [33:57] - Windows Internals 7th edition (for Windows 8)? Windows Azure Internals?
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=36m47s [36:47] - New tools - PsPing, http://technet.microsoft.com/en-us/sysinternals/ff700229 RAMMap , http://technet.microsoft.com/en-us/sysinternals/dd535533 VMMap
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=40m33s [40:33] - Win a signed copy of http://www.russinovich.com/books/trojan-horse/ Trojan Horse ! <img src="http://m.webtrends.com/dcs1wotjh10000w0irc493s0e_6x1g/njs.gif?dcssip=channel9.msdn.com&dcsuri=http://channel9.msdn.com/Feeds/RSS&WT.dl=0&WT.entryid=Entry:RSSView:e5e8d6c186954e59a99ca0cc013ad6c7
View the full article
Marks Blog (TechNet) - http://blogs.technet.com/b/markrussinovich/ http://blogs.technet.com/b/markrussinovich/
Marks Web Site - http://www.russinovich.com/ http://www.russinovich.com/
Sysinternals Web Site - http://www.sysinternals.com/ http://www.sysinternals.com Videos:
All of Marks http://channel9.msdn.com/Tags/mark+russinovich videos on Channel 9 and http://channel9.msdn.com/Events/Speakers/Mark+Russinovich talks + http://channel9.msdn.com/Events/Speakers/Mark-Russinovich talks at conferences. Of note:
* http://channel9.msdn.com/search?term=Case+of+the+Unexplained Case of the Unexplained...
* Mysteries of Memory Management Revealed - http://channel9.msdn.com/Events/TechEd/NorthAmerica/2011/WCL405 Part 1 , http://channel9.msdn.com/Events/TechEd/NorthAmerica/2011/WCL406 Part 2
* http://channel9.msdn.com/search?term=Malware+Hunting+with+the+Sysinternals+Tools Malware Hunting with the Sysinternals Tools
* http://365.rsaconference.com/community/archive/usa/blog/2012/03/15/video-rsac-us-2012-rsa-conference-2012--zero-day-a-non-fiction-view--mark-russinovich RSA Conference 2012 -- Zero Day: A Non-Fiction View
* http://channel9.msdn.com/shows/Going+Deep/Mark-Russinovich-Inside-Windows-7/ Inside Windows 7
* http://channel9.msdn.com/Shows/Going+Deep/Mark-Russinovich-Inside-Windows-7-Redux Inside Windows 7 Redux
* http://channel9.msdn.com/Events/TechEd/NorthAmerica/2010/WCL404 Windows 7 and Windows Server 2008 R2 Kernel Changes
* http://channel9.msdn.com/Shows/Going+Deep/Mark-Russinovich-On-Working-at-Microsoft-Windows-Server-2008-Kernel-MinWin-vs-ServerCore-HyperV Windows Vista and Windows Server 2008 Kernel Changes Books:
http://www.russinovich.com/books/windows-sysinternals-administrators-reference/ Sysinternals Administrators Reference - [ http://www.amazon.com/Windows-Sysinternals-Administrators-Reference-Russinovich/dp/073565672X Amazon ]
http://technet.microsoft.com/en-us/sysinternals/bb963901.aspx Windows Internals books:
* http://www.russinovich.com/books/windows-internals-4/ 4th Edition - Windows XP and Windows Server 2003 - [ http://www.amazon.com/Microsoft-Windows-Internals-4th-Edition/dp/B002DMJTXM Amazon ]
* http://www.russinovich.com/books/windows-internals-5/ 5th Edition - Windows Vista and Windows Server 2008 - [ http://www.amazon.com/Windows%C2%AE-Internals-Including-Windows-Developer/dp/0735625301 Amazon ]
* http://www.russinovich.com/books/windows-internals-6/ 6th Edition - Windows 7 and Windows Server 2008 R2 - [Amazon: http://www.amazon.com/Windows-Internals-Part-Covering-Server/dp/0735648735 Part 1 , http://www.amazon.com/Windows-Internals-Part-Covering-Server/dp/0735648735 Part 2 ]
Cybersecurity novels:
* http://www.russinovich.com/books/zero-day/ Zero Day - A Novel - [ http://www.amazon.com/Zero-Day-Novel-Mark-Russinovich/dp/1250007305 Amazon ]
* http://www.russinovich.com/books/trojan-horse/ Trojan Horse - A Novel - [ http://www.amazon.com/Zero-Day-Novel-Mark-Russinovich/dp/1250007305 Amazon ]
* http://www.russinovich.com/books/operation-desolation/ Operation Desolation - A Short Story - [ http://www.amazon.com/Operation-Desolation-Case-Defacement-ebook/dp/B0080K37P2 Amazon ] Timeline:
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=00m00s [00:00] - How did Sysinternals start?
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=02m20s [02:20] - Tools that never got released and tool retirement
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=03m55s [03:55] - The most complex tool - http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx Process Explorer
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=04m51s [04:51] - Favorite tool - http://technet.microsoft.com/en-us/sysinternals/bb897434.aspx ZoomIt
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=07m01s [07:01] - Windows Internals books
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=10m54s [10:54] - Whats the best way to learn how to troubleshoot?
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=12m47s [12:47] - Do traditional techniques work when analyzing viruses?
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=13m49s [13:49] - Cybersecurity awareness
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=14m40s [14:40] - Cybersecurity novels
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=16m28s [16:28] - Cybersecurity advice for corporations and individuals
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=20m25s [20:25] - White Listing
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=22m53s [22:53] - User Account Control (UAC)
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=29m55s [29:55] - Winternals vs Sysinternals vs Windows Internals
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=31m08s [31:08] - New Windows 8 http://blogs.technet.com/b/sysinternals/rss.aspx features/support in the Sysinternals tools:
* http://technet.microsoft.com/en-us/sysinternals/bb896653 Process Explorer v15.1
* http://technet.microsoft.com/en-us/sysinternals/bb896645 Process Monitor v3.0
* http://technet.microsoft.com/en-us/sysinternals/dd996900.aspx ProcDump v5.0
* http://technet.microsoft.com/en-us/sysinternals/ff700229 RAMMap v1.2
* http://technet.microsoft.com/en-us/sysinternals/bb896647 DebugView v4.78
* http://technet.microsoft.com/en-us/sysinternals/bb664922 AccessChk v5.1
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=33m57s [33:57] - Windows Internals 7th edition (for Windows 8)? Windows Azure Internals?
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=36m47s [36:47] - New tools - PsPing, http://technet.microsoft.com/en-us/sysinternals/ff700229 RAMMap , http://technet.microsoft.com/en-us/sysinternals/dd535533 VMMap
http://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-8-Mark-Russinovich#time=40m33s [40:33] - Win a signed copy of http://www.russinovich.com/books/trojan-horse/ Trojan Horse ! <img src="http://m.webtrends.com/dcs1wotjh10000w0irc493s0e_6x1g/njs.gif?dcssip=channel9.msdn.com&dcsuri=http://channel9.msdn.com/Feeds/RSS&WT.dl=0&WT.entryid=Entry:RSSView:e5e8d6c186954e59a99ca0cc013ad6c7
View the full article