The full Software Diagnostics Services training transcript with 15 step-by-step exercises, notes, and source code of specially created modeling applications. The course covers 22 .NET memory dump analysis patterns, plus the additional 21 unmanaged patterns. Learn how to analyze .NET 9 application and service crashes and freezes, navigate through memory dump space (managed and unmanaged code), and diagnose corruption, leaks, CPU spikes, blocked threads, deadlocks, wait chains, resource contention, and more. The training consists of practical step-by-step exercises using WinDbg and LLDB debuggers to diagnose patterns in 64-bit process memory dumps from x64 Windows and x64 Linux environments. The training uses a unique and innovative pattern-oriented analysis approach to speed up the learning curve. The book is a completely revamped and extended the previous Accelerated .NET Core Memory Dump Analysis, Revised Edition. It is updated to the latest WinDbg. It also includes reviews of x64 and IL disassembly and memory space basics, Linux LLDB exercises, .NET memory dump collection on Windows and Linux, and the relationship of analysis patterns to defect patterns.
Prerequisites: Basic .NET programming and debugging.
Audience: Software technical support and escalation engineers, system administrators, DevOps, performance and reliability engineers, software developers, and quality assurance engineers. The book may also interest security researchers, reverse engineers, malware and memory forensics analysts.
- Title: Accelerated .NET Memory Dump Analysis: Training Course Transcript with WinDbg and LLDB Practice Exercises, Seventh Edition
- Authors: Dmitry Vostokov, Software Diagnostics Services, Dublin School of Security
- Publisher: OpenTask (May 2025)
- Language: English
- Product Dimensions: 28.0 x 21.6
- PDF: 324 pages
- ISBN-13: 978-1912636877
Table of Contents and Sample Exercise
Slides from the training
When you purchase the PDF book, you additionally get free named Software Diagnostics Library membership with access to more than 440 cross-referenced patterns of memory dump analysis, their classification, and more than 70 case studies.
You can purchase the PDF book only or the book with the recording of the training sessions, Practical Foundations of Windows Debugging, Disassembling, Reversing PDF book, and the previous Accelerated .NET Memory Dump Analysis, Fourth Edition PDF book if you need 12 .NET Framework CLR 4 exercises and associated Q&A section.
There is an additional option to buy 16 volumes of Memory Dump Analysis Anthology in PDF format together with the course.
If you are mainly interested in unmanaged process user space memory dump analysis, there is another course available: Accelerated Windows Memory Dump Analysis, Sixth Edition, Part 1: Process User Space