Welcome to MSDN Blogs Sign in | Join | Help

September 2009 - Posts

WMI Nugget: How to Gather the Provider Binary from a WMI Class Name

It's Venkatesh with a WMI nugget. While troubleshooting or debugging WMI issues you may come across WMI queries wherein you don’t know which provider implemented the WMI class used in the query. You may want to know the binary and the product that implemented Read More...
Posted Tuesday, September 29, 2009 3:40 PM by ntdebug | 0 Comments
Filed under:

Exploring and Decoding ETW Providers using Event Log Channels

Introduction and Overview In this article we will explore a practical use for ETW tracing, and discover what ETW (Event Tracing for Windows) tracing is available for a popular Windows user-mode component, Internet Explorer. In my previous article ETW Read More...
Posted Tuesday, September 08, 2009 1:12 PM by ntdebug | 0 Comments
Filed under: ,

Push Locks – What are they?

Pushlocks were a new locking primitive first introduced in Windows Server 2003 and are primarily used in place of spinlocks to protect key kernel data structures. Unfortunately, Pushlocks are not documented in the WDK, and are not available for public Read More...
Posted Wednesday, September 02, 2009 8:49 PM by ntdebug | 0 Comments
Filed under:
 
Page view tracker