Table of Contents

Preface

About the Author

PART 1: Professional Crash Dump Analysis and Debugging

Software Diagnostics Professional Certification

Three Roads to Kernel Space

PART 2: Crash Dump Analysis Patterns

Design Value

Hidden IRP

Tampered Dump

Wait Chain (RTL_RESOURCE)

Memory Fluctuation (Process Heap)

Last Object

Rough Stack Trace

Past Stack Trace

Stack Trace (I/O Request)

Stack Trace (File System Filters)

Stack Trace (Database)

Wait Chain (Modules)

Insufficient Memory (Stack Trace Database)

Insufficient Memory (Region)

Memory Leak (Regions)

Invalid Handle (Managed Space)

Ghost Thread

Dry Weight

Exception Module

PART 3: Memory Forensics

Memory Forensics Professional Certification

Native Memory Forensics

PART 4: A Bit of Science and Philosophy

Memory Symmetry Breaking

Memoevolutionism

Entropy as Memory and Memory as Entropy

Notes on Memoidealism

Welcome to Memorianism

United Memory Lands, Memorianites, EthnOS

Quotes from Memoriarch

Pattern-Oriented Philosophy

PART 5: Software Trace Analysis Patterns

Hidden Facts

Back Trace

Blackout

Missing Message

Use Case Trail

Event Sequence Phase

Milestones

File Size

Singleton Event

Visitor Trace

PART 6: Fun with Crash Dumps

Debugging Slang and Proverbs

PUS

Coollect

Dump-out

LOGIC

DiagNose

Consolidation

No Pass a Run!

ID IoT Zone

Putty in Someone's Hands

DisPatched vs. DESPatched

Programmatica Nervosa

GOTCHA

Pan-o-RAM-ic

VLSI

Debugging Proverb

Space Opera

If Programmers Were Writers

My Computer Celebrates Halloween

Look, there's a Bug!

Diagnostics in Science Fiction

Hard Copy Natives

PART 7: Software Narratology

Malnarratives

Higher-Order Pattern Narratives (Analyzing Diagnostic Analysis)

PART 8: Software Diagnostics, Troubleshooting, and Debugging

A Pattern Language for Performance Analysis

The Timeless Way of Diagnostics

Pattern-Oriented Debugging Process

PART 9: Art and Visualization

Café WoW

Bang Debugging

Bug Hunter

Glass of Water Dump

Memory Dump Analysis

Organic Incidents and Bad Stench

PART 10: Miscellaneous

Book Discovery

Quotes

Appendix

Crash Dump Analysis Checklist

Index of WinDbg Commands

Notes