Windows Internals 6th Edition, Part 2 Published : Part 2 of Windows Internals 6th Edition, is now available. The 6th edition covers kernel and system changes in Windows 7 and Windows Server 2008 R2 and adds 250 pages of expanded feature coverage and hand-on experiments. Mark Talks Sysinternals History...

Autoruns v11.3 : This update to Autoruns, a utility that shows the executables, drivers, and DLLs configured to autostart, adds several new autostart locations, sets a file association for its log file extension, reports the target of Rundll32 and other host executables, and fixes several bugs. LiveKd...

ProcDump v4.0 : This update for ProcDump, a trigger-based process dump capture utility, enables you to control the contents of the dump with your own minidump callback DLL and adds a new switch, -w, that has ProcDump wait for a specified process to start. Process Monitor v2.96 : This release changes...

ZoomIt v4.2 : This update to ZoomIt, a screen magnification and annotation utility, now adjusts the drawing pen size when you enter drawing mode from live zoom to match the static zoom pen size. Process Explorer v14.11 : Process Explorer v14.11 includes the ability to configure network and disk activity...

Mark’s Tech·Ed North America Session Schedule Posted : Mark is delivering four sessions at Tech·Ed North America in Atlanta next month, including one on Windows Azure internals, a two-part advanced session on Windows memory management internals, and a closing session that’s...

Announcing Zero Day: A Novel : Mark’s first novel, Zero Day, is a cyberthriller that presents a frightening and realistic scenario of malware used as a powerful weapon. In the words of Bill Gates, “Mark came to Microsoft in 2006 to help advance the state of the art of Windows, now in his...

Mysteries of Windows Memory Management, Part 1 Mysteries of Windows Memory Management, Part 2 If you want to know the difference between System Committed memory and Process Committed memory, wondered what all those memory numbers shown by Task Manager really mean, or want to gain insight into the memory...

Watch Mark Live from the PDC on October 28/29 Mark is participating in the keynote and delivering three breakout sessions at the Microsoft Professional Developer’s Conference (PDC) on Microsoft’s campus next week. Tune in live via hi-definition Silverlight streaming to the keynote on Thursday...

Paul Thurrott Interviews Mark on Windows 7 Development : Check out Mark’s interview with Windows IT Pro Magazine columnist Paul Thurrott, where he discusses some of the thinking behind Windows 7. Mark’s Blog: Case of the Slow Logon : Mark’s latest blog post documents a troubleshooting case that highlights...

Mark’s Windows Internals Session at the Professional Developer’s Conference, Part 1 Mark’s Windows Internals Session at the Professional Developer’s Conference, Part 2 : Mark dives deep to cover Windows 7 and Windows Server 2008 R2 kernel changes in his top-rated session from...

Windows 7 General Availability and Mark on Channel 9: Check out Mark’s latest Channel 9 interview on Windows 7 and Windows Server 2008 R2 kernel changes, released today to coincide with Windows 7’s general availability. He talks about memory management, process reflection and more, and shows a couple...

Mark’s Blog: The Case of the Temporary Registry Profiles : In the latest post in Mark’s “Case of the Unexplained” series, he documents a perplexing case affecting many Microsoft and Citrix customers that Microsoft Customer Support Services solved with the use of Process Monitor’s boot logging and stack...

Windows Internals 5th Edition Released! The 5 th Edition of Windows Internals , the official book on the architecture and internals of the Windows operating system, is now available. This release is 25% larger than the 4 th Edition and is updated to cover Windows Vista and Windows Server 2008. Visit...

Mark Demos Windows 7 and MDOP IT Pro Features at TechEd Keynote: Mark has spoken at every US TechEd since 2001, but this the first time he’s been in the keynote. Bill Veghte talks about Windows 7 client features, Iain McDonald shows off virtualization advances in Windows Server 2008 R2, and Mark demos...

Channel 9, Microsoft’s direct connection to developers, turned five a few days ago. Mark frequently gives interviews on Channel 9, including his latest on Windows 7 kernel changes , which is Channel 9’s most viewed interview of all time at 550,000 views. Mark was one of the Niners to give Channel 9 a...

VMMap v1.0: VMMap is a new utility for analyzing process address spaces and working sets. Aimed primarily at developers, its detailed graphical and textual breakdown of exactly what types of memory contribute to a process’s memory footprint make it a powerful performance analysis and tuning tool. ...

Mark's Blog: The Case of the Crashed Phone Call: Check out Mark's latest blog post to see how David Solomon, Mark's coauthor for the Windows Internals books, resolved a blue screen problem most likely related to an outdated driver.

Process Explorer v11.3: This update to Process Explorer includes numerous enhancements and bug fixes, including a physical memory history graph, options to configure memory tray icons, asyncronous thread symbol resolution and security ID lookup, dynamic recognition of new volume drive letters, multiple...

Channel9: Mark Russinovich goes Inside Windows 7: Mark talks about kernel changes in Windows 7 and Windows Server 2008 R2, including the removal of the scheduler’s dispatcher lock, support for up to 256 CPUs, boot from VHD, MinWin, core parking for power savings and more.

The future of Sysinternals, Security, Windows: Check out Mark's interview on TechNet Edge where he covers a range of topics, including what's going on at Sysinternals.