Mark's Webcasts

Learn from Mark how to use the Sysinternals tools to identify malware infestations, from standard spyware to kernel-mode rootkits, and clean them off your systems.

Mark gives a tutorial on some of the many powerful Process Monitor features and shows you how to leverage them to troubleshoot common application and system problems.

The Case of the Unexplained 2008
The Case of the Unexplained 2007
Mark’s “The Case of…” blog posts come alive in these recorded webcasts of his #1-rated TechEd sessions. Learn how to troubleshoot the toughest Windows and application problems by watching Mark use Sysinternals and other advanced tools to solve real-world examples. Be sure to check out both webcasts since they include totally different troubleshooting examples and demonstrate different techniques.

Mark takes you inside new Windows virtualization and VHD features, including live VM migration, core parking and timer coalescing, hypervisor power management support, and new hardware-assisted guest memory management. He delivers the entire presentation from a Windows installation that was booted from VHD to show you how Windows implements a native VHD stack and how the boot architecture has changed to accommodate booting from VHD images.

Watch the recording of Mark's top-rated TechEd session in this free webcast from Microsoft TechNet. Learn to analyze Microsoft Windows crash dumps, diagnose the cause, pinpoint a solution, and resolve the problem. Intended for system administrators, this webcast explains how system crashes occur and what happens when you reboot a crashed system. Mark leads you through the crash dump analysis process step by step, introducing the latest tools from Microsoft and handy tricks for isolating the cause of a crash.

Mark's session from TechEd US on what constitutes a security boundary is now available for on-demand viewing. Get the real story on Windows security-related features like Kernel Patch Protection (KPP), Kernel Mode Code Integrity, User sessions, UAC, Protected Mode IE, and more, to find out how they work, what they were designed for, and whether they are security boundaries.

See Mark’s TechEd/ITForum presentation on the many interesting changes in the Windows Vista kernel, including SuperFetch, User Account Control, Prioritized-I/O, revamped logon architecture, and more.

In this TechEd/ITForum session Mark goes inside the various technologies that come under the umbrella name User Account Control (UAC), explaining their role and how the work. Mark concludes with a look at how UAC will affect the evolution of malware.

Mark's WinHec keynote (Windows Server Platform Internals) is now available on-demand. This is an excellent session which covers many of the new technologies built into Windows Server 2008. In addition to a deep dive into these features there are pertinent demos as well.

Mark talks about kernel changes in Windows 7 and Windows Server 2008 R2, including the removal of the scheduler's dispatcher lock, support for up to 256 CPUs, boot from VHD, MinWin, core parking for power savings and more.

Check out Mark’s Channel 9 interview where he talks about how he got started with Windows internals, new security features in Windows Vista, User Account Control, and what he’s doing at Microsoft.

Channel 9 chats with Technical Fellow and SysInternals founder Mark Russinovich to dig a bit into what's new in the Windows Server 2008 kernel. Of course, we talk about many things including HyperV, application virtualization, kernel architecture, and more....

Watch as Mark Russinovich and a panel of subject matter experts discuss what's in store for IT pros with Windows 7. Learn about the evolution of features like Group Policy, BitLocker To Go, DirectAccess, BranchCache, and AppLocker then get tips on troubleshooting, deployment, and application compatibility.

Delve into Windows Vista secure deployment strategies, configurations, and best practices with Mark Russinovich and a panel from TechNet Springboard Videos.

Learn about challenges, solutions, and workarounds from IT pros that have deployed Windows Vista.

See Mark Russinovich and a panel of subject matter experts for a live discussion of what's in store for IT pros with Windows® 7. Learn about the evolution of features like Group Policy, BitLocker™ To Go, DirectAccess, BranchCache™, and Software Restriction then get tips on troubleshooting, deployment, and application compatibility. Bring your questions -- Mark and the panel will answer as many as they can during the hour-long event, then publish the rest in a Q&A after the event.

We're pleased to announce The Sysinternals Video Library, a set of six DVDs that cover essential Windows troubleshooting topics. Each video is personally presented by Mark Russinovich and David Solomon. The complete set is available for order at a discounted price and the first video, Tour of the Sysinternals Tools, is free for download.