Mark’s Events
Find out about recent and upcoming Sysinternals-related events and appearances by Mark Russinovich. If you have a question about any of these events, please visit the Sysinternals Forum for answers and help from other users and our moderators.
Updated: August 21, 2009
Microsoft TechEd Europe 2009
Nov 9 – 13, 2009
Berlin, Germany
Case of the Unexplained
Come hear Mark Russinovich, the master of Windows troubleshooting, walk you through step by step how he has solved seemingly unsolvable system and application problems on Windows. With all new real case studies, Mark will show how to apply the Microsoft Debugging Tools and his own Sysinternals tools, including Process Explorer, Process Monitor, and Accesschk, to solve system crashes, process hangs, security vulnerabilities, DLL conflicts, permissions problems, registry misconfiguration, network hangs, and file system issues. These tools are used on a daily basis by Microsoft Product Support and have been used effectively to solve a wide variety of desktop and server issues, so being familiar with their operation and application will assist you in dealing with different problems on Windows.
Windows 7 and Windows Server 2008 R2 Kernel Changes
This session goes beneath the hood of Windows 7 and Windows Server 2008 R2 to describe and demonstrate the key changes in the kernel. Topics include: scalability improvements (such as removal of the global scheduler lock, support for more than 64 logical processors, and user mode scheduling), core parking and timer coalescing for power efficiency, trigger-started services, improved multi-function device support, core architecture changes to modularize Windows (“Minwin”) and more.
Inside Windows Server 2008 R2 Virtualization Improvements and Native VHD Support
In this session you’ll get an inside look at new Windows virtualization features, including live VM migration, core parking and timer coalescing, hypervisor power management support, and new hardware-assisted guest memory management. VHDs are taking on a more key role in simplifying systems management and Windows’ integrated VHD mount and boot from VHD are a major step toward standardization on VHDs as a common container format for physical and virtual machine images. Learn how Windows implement a native VHD stack and how the boot architecture has changed to accommodate booting from VHD images.
Pushing the Limits of Windows
How many processes, threads, and handles can you make? How does Windows react when it’s pushed to the limit? This session goes deep into the kernel to explain what limits Windows from creating more processes, threads, handles, and what the real limits are for physical and virtual memory. How much more can you do with 64-bits? Live demos show the effect on Windows when various resources are exhausted.
Windows and Malware: Which Features are Security and Which Aren’t
This session goes under the hood of a number of Windows features that all have the common trait of looking and smelling like security to present their true purpose and value. Learn which of technologies like Kernel Patch Protection, UAC elevations, Protected Mode Internet Security, Service isolation, Code Integrity, and virtual machines really make security guarantees and which are really designed to solve other problems.
Also, Aaron Margosis will be presenting - Sysinternals Tutorials
Process Explorer, Process Monitor, AutoRuns, and the other Windows Sysinternals utilities are vital tools for any computer professional. Mark Russinovich’s popular “Case Of The Unexplained” demonstrates some of their capabilities in advanced troubleshooting scenarios. This complementary tutorial session focuses primarily on the utilities, drilling into as many features as time will allow. Learn tips and tricks that will make you more effective with the Sysinternals utilities.
Microsoft PDC09
Nov 17 – 19, 2009
Los Angeles Convention Center
Windows 7 and Windows Server 2008 R2 Kernel Changes
This session goes beneath the hood of Windows 7 and Windows Server 2008 R2 to describe and demonstrate the key changes in the kernel. Topics include: scalability improvements (such as removal of the global scheduler lock, support for more than 64 logical processors, and user mode scheduling), core parking and timer coalescing for power efficiency, trigger-started services, improved multi-function device support, core architecture changes to modularize Windows (“Minwin”) and more.