Microsoft Technet Video: Windows internals: Process And Thread Troubleshooting - Part 1
Tuesday, 09 May 2006 by Michel Roth
Cool pointer from Bink.nu: Windows Kernel Internals: Process and thread troubleshooting -- by David Solomon

Learn about the Windows kernel architecture, process and thread activity handling, interrupt at time accounting, I/O activity. This session will help you identify each running process on the system and understand the true meaning behind the key system performance counters.

• Analysing CPU activity. Task manager.
• Processes and threads - some definitions. What are task managers?
• Identify the image. Process explorer. The process list
• Process tracking. Refresh highlighting. Service information
• Associating windows with processes. Security and privileges
• .net processes. Service information.
• CPU time accounting inaccuracies
• Context switch delta
• Suspending processes. Interrupt time accounting
• Solving hung processes.
• System threads. SRV.sys
• Handle tables. Uses of handles.
• The DLL view. Investigating hung processes. Image strings .
• Understanding who started a process

Watch it here.

Related Items:

ProcessHistory v1.1 (30 October 2006)
A Free Tool Do Deal With Orphaned Processes In Citrix Sessions (15 October 2007)
User Mode Process Dumper Version 8.1 (5 April 2007)
Windows CE 6.0 Has Been Released To Manufacturing (18 September 2006)
User Mode Process Dumper Version 8.0 (11 January 2006)
Sysinternals' Process Explorer Updated (9 February 2006)
Process Explorer v9.2 (17 August 2005)
Sysinternals Process Monitor v1.0 (8 November 2006)
Safe Task Manager For Terminal Server Users (29 December 2008)
Process Monitor v1.0 In Depth (10 November 2006)
Comments (0)