+ Reply to Thread
Results 1 to 12 of 12
  1. BOBBY_TABLES RobertKaucher's Avatar
    Join Date
    Dec 2007
    Location
    Lebanon, Ohio - USA
    Posts
    4,274

    Certifications
    MCSD Web Apps/SharePoint Applications, MCITP: DBA 2005/2008, EA, EDA7, Linux+, Sec+, MCSE, MCDST, MCTS
    #1

    Default Exam 70-660: Win Internals for IT - Resources

    This thread will be a resource for the 70-660 exam. Here is how I expect to structure it:

    Part I - Prereqs
    * tutorials on the Fundamentsl of Memory Management, I/O etc.
    * Understanding how to work with the Sysinternals tools. Practical tutiorials on how to use the major Sysinternals tools.
    * Tutorials/artciles corresponding to material in the 50155A course.


    Part II 70-660 Objectives.
    I'll cover the objectives detailled in the MS page for the exam.

    Audience ProfileCandidates for this exam are engineers, developers, or IT staff who work with Windows at a level that requires Windows Internals knowledge. Candidates for this exam are typically in the upper echelon of the technical staff at their companies. These individuals typically hold such positions as escalation engineer, technical lead, and software design engineer. Their level of knowledge spans products both inside and outside the Microsoft Corporation. These individuals are involved in resolving problems that require deep understanding of Windows Internals rather than problems about planning and infrastructure development or how to use or configure a product that runs on Windows.

    Here are some items that do not really belong in any either section:
    Windows Internals 4 [PDF]
    Mark Russinovich's Blog
    AskPerf Blog

    Another exceptionally useful tool for debugging non-crash related issues is WireShark. It is not covered by the exam but from a practical perspective should be a part of your toolkit.
    Introduction to Wireshark (Part 1 of 3)
    Cookies and Grabbing Passwords with Wireshark (Part 2 of 3)
    Data Mining using Wireshark (Part 3 of 3)

    If you prefer print material, I suggest the following:
    C All-in-One Desk Reference For Dummies [The purpose is not to turn you into a programmer but to give you a basic grasp of C Programming - skim the book]
    The Art of Assembly Language - [The purpose, again, is not to turn you into a developer but to give you an idea of what Assembly is and the basics of the language - skim the book]
    Windows® Internals: Including Windows Server 2008 and Windows Vista, Fifth Edition (Pro Developer) - [Required Reading]
    Advanced Windows Debugging - [Highly Recommended]
    Last edited by RobertKaucher; 07-19-2011 at 04:06 PM.
    Reply With Quote Quote  

  2. SS -->
  3. BOBBY_TABLES RobertKaucher's Avatar
    Join Date
    Dec 2007
    Location
    Lebanon, Ohio - USA
    Posts
    4,274

    Certifications
    MCSD Web Apps/SharePoint Applications, MCITP: DBA 2005/2008, EA, EDA7, Linux+, Sec+, MCSE, MCDST, MCTS
    #2

    Default Pre-Requirements I - Fundamentals

    Windows Fundamentals

    General
    System Internals [A collection of articles and videos]
    Windows and Sysinternals Video Library [$400 for 6 DVDs]
    Windows Internals and Advanced Troubleshooting [PDF - Slides]

    Fundamentals
    Thread vs. Process
    Processes, Threads, and Jobs [Windows Internals Ch 5]
    Architecture of Windows NT
    UAC in Windows 7
    An introductory guide to Windows Memory Management
    Memory Management 101
    Memory Management - Understanding Pool Resources
    Memory Management - Dude where's my RAM??
    RAM, virtual memory, pagefile, and memory management in Windows [Has some good links at the end]
    Sessions, Desktops and Windows Stations
    Windows Programming/User Mode vs Kernel Mode
    Stack vs Heap Allocation
    Stack and Heap
    Sessions, Desktops and Windows Stations
    Debug Symbols
    Debugging Tools and Symbols: Getting Started
    Handles
    Kernel Object Handles


    Using Sysinternals Tools
    Process Explorer
    Using Process Explorer [PDF]
    Sysinternals Primer: Autoruns, Disk2vhd, ProcDump, BgInfo and AccessChk [Video from Channel9. Presented at TechEd 2011 by Aaron Morgosis]
    Troubleshooting with Process Explorer, Filemon and Regmon [Video with Mark Russinovich]
    Process Explorer and Malware Elimination [Video -Kind of basic but good review.]
    Cases of the Unexplained [Videos by Mark Russinovich]

    Windows Hang and Crash Dump Analysis - Mark Russinovich
    Windows Hang and Crash Dump Analysis 1/9

    Windows Hang and Crash Dump Analysis 2/9

    Windows Hang and Crash Dump Analysis 3/9

    Windows Hang and Crash Dump Analysis 4/9

    Windows Hang and Crash Dump Analysis 5/9

    Windows Hang and Crash Dump Analysis 6/9

    Windows Hang and Crash Dump Analysis 7/9

    Windows Hang and Crash Dump Analysis 8/9

    Windows Hang and Crash Dump Analysis 9/9

    Example Crash Dump Files
    Last edited by RobertKaucher; 07-26-2011 at 04:38 PM.
    Reply With Quote Quote  

  4. Senior Member powerfool's Avatar
    Join Date
    Jul 2010
    Location
    Indy Metro Area
    Posts
    1,601

    Certifications
    CISSP, MCSE x10... and many more
    #3
    Thanks for starting this. This is one of the exams I have had on my consideration list. I have the Windows Internals 5th Edition just because I thought it would be a good book; it reminded me of Inside Windows 2000 Server by New Riders Publishing that I used to have and I thought it was a great book. Being a packet analysis junkie, doing system traces and such (like strace on *nix and Process Monitor on Windows) is like packet capture on the system bus.
    70-346 [ ] 70-347 [ ] 70-533 [ ] 70-743 [ ]
    2017 Goals: MCSA Office 365 and MCSE Cloud Platform and MCSA 2016
    2016 Attained: MCSA Windows Server 2012, MCSE Messaging, MCSE Communications, and MCSE Productivity
    Reply With Quote Quote  

  5. BOBBY_TABLES RobertKaucher's Avatar
    Join Date
    Dec 2007
    Location
    Lebanon, Ohio - USA
    Posts
    4,274

    Certifications
    MCSD Web Apps/SharePoint Applications, MCITP: DBA 2005/2008, EA, EDA7, Linux+, Sec+, MCSE, MCDST, MCTS
    #4
    Quote Originally Posted by powerfool View Post
    Thanks for starting this. This is one of the exams I have had on my consideration list. I have the Windows Internals 5th Edition just because I thought it would be a good book; it reminded me of Inside Windows 2000 Server by New Riders Publishing that I used to have and I thought it was a great book. Being a packet analysis junkie, doing system traces and such (like strace on *nix and Process Monitor on Windows) is like packet capture on the system bus.
    No problem. The Internals book is infact the successor of the Inside Windows book.

    I agree with you about the packet capture analogy. For systems guys like me I think they go kind of hand in glove and I was going to do a section on packet analysis (for practical purposes rather than for the exam) but I think it might be better if you add a post on that.
    Reply With Quote Quote  

  6. BOBBY_TABLES RobertKaucher's Avatar
    Join Date
    Dec 2007
    Location
    Lebanon, Ohio - USA
    Posts
    4,274

    Certifications
    MCSD Web Apps/SharePoint Applications, MCITP: DBA 2005/2008, EA, EDA7, Linux+, Sec+, MCSE, MCDST, MCTS
    #5
    I have added a few more links for the SysInternals tools. As I am reading over the Windows Internals book I am really becoming convinced that it represents the single best prep material that is in print for this exam. Currently I am looking for some test prep material that is for the 660. I've looked on SelfTest and MeasureUp, but I have found nothing.
    Reply With Quote Quote  

  7. Stayed at a Holiday Inn.. the_Grinch's Avatar
    Join Date
    May 2007
    Posts
    3,837

    Certifications
    BS-CST CISSP GMON MPSC Security+ XRY 1+2+3 XAMN AAA AA CMFF CCO CCPA
    #6
    To confirm, you don't need a programming background for the exam? So a cusory knowledge of C should do the trick?
    WIP:
    MS in Legal Studies - Drexel University
    Mobile Forensics
    Kotlin
    Python
    Reply With Quote Quote  

  8. Audentis Fortuna Iuvat veritas_libertas's Avatar
    Join Date
    Feb 2009
    Posts
    5,654

    Certifications
    eCPPT, GPEN, GWAPT, GCIH, CISSP, CCNA (expired), MCTS
    #7
    I'm kind of excited about this exam. I like how deeply it delves into the OS.
    Currently working on: Resting
    Reply With Quote Quote  

  9. BOBBY_TABLES RobertKaucher's Avatar
    Join Date
    Dec 2007
    Location
    Lebanon, Ohio - USA
    Posts
    4,274

    Certifications
    MCSD Web Apps/SharePoint Applications, MCITP: DBA 2005/2008, EA, EDA7, Linux+, Sec+, MCSE, MCDST, MCTS
    #8
    Quote Originally Posted by the_Grinch View Post
    To confirm, you don't need a programming background for the exam? So a cusory knowledge of C should do the trick?
    Correct. It is for two types: people developing drivers who need strong debugging skills and IT pros who work at a very high level debugging issues with Exchange, SQL Server, etc. Developers are only a part of the audience and it is not a dev cert.

    It is like a very high-lelver certification for a professional mechanic. While you will need to understand and know about the physics and architecture of the internal combustion engine you are not required to be an engineer and actually know how to design one.
    Reply With Quote Quote  

  10. Stayed at a Holiday Inn.. the_Grinch's Avatar
    Join Date
    May 2007
    Posts
    3,837

    Certifications
    BS-CST CISSP GMON MPSC Security+ XRY 1+2+3 XAMN AAA AA CMFF CCO CCPA
    #9
    Awesome, thanks for all the info. May look at this down the line...
    WIP:
    MS in Legal Studies - Drexel University
    Mobile Forensics
    Kotlin
    Python
    Reply With Quote Quote  

  11. Stayed at a Holiday Inn.. the_Grinch's Avatar
    Join Date
    May 2007
    Posts
    3,837

    Certifications
    BS-CST CISSP GMON MPSC Security+ XRY 1+2+3 XAMN AAA AA CMFF CCO CCPA
    #10
    Rob:

    Saw this and figured I should post it here:

    Amazon.com: Windows Internals: Covering Windows Server 2008 R2 and Windows 7 (9780735648739): Mark E. Russinovich, David A. Solomon, Alex Ionescu: Books

    Looks like the 6th edition will be out before Christmas (yay!)

    Also, what are your thoughts on 2008 vs 2008 R2 as far as the exam is concerned? Are there really that big of a different between the two?
    Last edited by the_Grinch; 09-01-2011 at 10:02 AM. Reason: Update
    WIP:
    MS in Legal Studies - Drexel University
    Mobile Forensics
    Kotlin
    Python
    Reply With Quote Quote  

  12. Stayed at a Holiday Inn.. the_Grinch's Avatar
    Join Date
    May 2007
    Posts
    3,837

    Certifications
    BS-CST CISSP GMON MPSC Security+ XRY 1+2+3 XAMN AAA AA CMFF CCO CCPA
    #11
    WIP:
    MS in Legal Studies - Drexel University
    Mobile Forensics
    Kotlin
    Python
    Reply With Quote Quote  

  13. BOBBY_TABLES RobertKaucher's Avatar
    Join Date
    Dec 2007
    Location
    Lebanon, Ohio - USA
    Posts
    4,274

    Certifications
    MCSD Web Apps/SharePoint Applications, MCITP: DBA 2005/2008, EA, EDA7, Linux+, Sec+, MCSE, MCDST, MCTS
    #12
    Quote Originally Posted by the_Grinch View Post
    I think hos stuff is pretty good on a practical level. I'm not so certain about how it might help on the exam. All of his books are on Safari, if you have a subscription.

    Thanks for pointing out the Vol 6 of the Internals book. I have pre-ordered it.
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks