Coming Soon!

This full color book is the complete transcript of a Webinar organized by Memory Dump Analysis Services (www.DumpAnalysis.com). It discusses user vs. kernel vs. physical (complete) memory space, challenges of complete memory dump analysis, common WinDbg commands, patterns and pattern-driven analysis methodology, common mistakes, fiber bundles, DumpAnalysis.org case studies and illustrates step by step a hands-on exercise in a complete memory dump analysis.

• Title: Fundamentals of Complete Crash and Hang Memory Dump Analysis
• Author: Dmitry Vostokov
• Publisher: OpenTask (October 2010)
• Language: English
• Product Dimensions: 28.0 x 21.6
• Paperback: 48 pages
• ISBN-13: 978-1906717155

Debugging Experts Magazine Online (online version of Debugged! MZ/PE) underwent the total redesign:

Our future sponsor has been registered in Ireland and has its own independent website and logo: DumpAnalysis.com

Being a software engineer, the author penetrated a software technical support department of a major software company rising to a management position. There he started collecting various management bits and tips promising everyone to write a management book. After moving back to engineering he became a director of several software research, education, publishing and software behavior analysis consultancy institutions including a museum. This book is an anthology of selected and edited blog posts from his Management Bits and Tips blog.

What this book has to do with the crash dump analysis then? Considering metaphorically an organization as a software machine, teams as processes and individuals as threads the author had applied his unique knowledge of software crashes and hangs to organizational project failures.

• Title: Management Bits: An Anthology from Reductionist Manager
• Author: Dmitry Vostokov
• Publisher: OpenTask (September 2010)
• Language: English
• Product Dimensions: 19.8 x 12.9
• Paperback: 100 pages
• ISBN-13: 978-1906717131

This multi-dimensional museum shows exhibitions dedicated to the history of debugging, memory dump artifacts and art.

If you would like to donate an exhibit (for example, an old memory dump or a picture related to debugging) please use this page: http://www.dumpanalysis.org/contact. Any donations are greatly appreciated!

• Customized EasyDbg Implementation
• Crash and Hang Analysis Audit Service
• CARE: Crash Analysis Report Environment
• Memory Dump and Software Trace Analysis Training
• STARE: Software Trace Analysis Report Environment

Problem: You are not satisfied with a crash report.

Problem: Your critical issue is escalated to the VP level. Engineers analyze memory dumps and software traces. No definite conclusion so far. You want to be sure that nothing has been omitted from the analysis.

Problem: You analyze a system dump or a software trace. You need a second pair of eyes but don't want to send your memory dump due to your company security policies.

Resolution: DumpAnalysis.com analyzes your analysis and provides recommendations.

This new service comes in July - August, 2010. Prices will be announced soon.

/*** Adding AI. Analysis Improvement. ***/

NEW! Forthcoming webinars from August, 2010:

The First Webinar: Fundamentals of Complete Crash and Hang Memory Dump Analysis

The presentation materials from the first webinar are available for download: http://www.dumpanalysis.com/FCMDA-materials

If you are interested in training please answer these questions (use this form http://www.dumpanalysis.org/contact):

• Are you interested in on-site training, prefer traveling or attending webinars?
• Are you interested in software trace analysis as well?
• What specific topics are you interested in?
• What training level (beginner, intermediate, advanced) are you interested in? (please provide an example, if possible)

Additional topics of expertise that can be integrated into training include Source Code Reading and Analysis, Debugging, Windows Architecture, Device Drivers, Troubleshooting Tools Design and Implementation, Multithreading, Deep Down C and C++, x86 and x64 Assembly Language Reading.

Available for Safari Books Online subscribers

The following direct links can be used to order the book now:

New! Buy Kindle Edition from Amazon

Buy Paperback or Hardcover from Amazon

Buy Paperback or Hardcover from Barnes & Noble

Buy Digital from Lulu

Written by the founder of DumpAnalysis.org this book is not about bugs or debugging techniques but about background knowledge everyone needs to start experimenting with WinDbg, learn from practical experience and read other advanced debugging books. Solid understanding of fundamentals like pointers is needed to analyze stack traces beyond !analyze -v and lmv WinDbg commands. This is the book to help technical support and escalation engineers and Windows software testers without the knowledge of assembly language to master necessary prerequisites to understand and start debugging and crash dump analysis on Windows platforms. It doesn't require any specific knowledge, fills the gap and lowers the learning curve. The book is also useful for software engineers coming from managed code or Java background, engineers coming from non-Wintel environments, Windows C/C++ software engineers without assembly language background, security researchers and beginners learning Windows software disassembling and reverse engineering techniques. This book can also be used as Intel assembly language and Windows debugging supplement for relevant undergraduate level courses.

Product details:

• Title: Windows Debugging: Practical Foundations
• Author: Dmitry Vostokov
• Language: English
• Product Dimensions: 22.86 x 15.24

• Paperback: 200 pages
• ISBN-13: 978-1-906717-10-0
• Publisher: Opentask (01 February 2009)

• Hardback: 200 pages
• ISBN-13: 978-1-906717-67-4
• Publisher: Opentask (23 March 2009)

Table of Contents
Errata

Praise for the book:

I am a C++/Windows developer and have been a Windows debugging enthusiast for quite a long time now. However, I have never been able to get a good and credible source of information with regards to the internals of debugging using WinDbg. Over the years, I have laid my hands on various sources that deal with Windows Debugging tools and debugging techniques. Every time I purchased a book or went through an online source, I was limited to confusing information that lead me to give up on this topic. Even reliable books that claimed to be the best in the market were nothing less than a colossal disappointment. However, recently when I came across "Windows Debugging: Practical Foundation" that was purchased by a friend of mine, I was sceptic but, nonetheless, decided to give it a chance. Trust me, although not perfect, the book has helped me a lot in learning more about windows internals and debugging techniques. I would like to extend my complements for writing a book that divulges details in a very concise yet clear manner.

Sriram Sarma

Book reviews:

Amazon reviews
Amazon UK reviews

The following direct links can be used to order the book now:

Buy Paperback from Amazon

Buy Paperback from Barnes & Noble

This is a supplemental volume of selected articles with 68 full color illustrations from Memory Dump Analysis Anthology: revised, edited, cross-referenced and thematically organized volumes of selected DumpAnalysis.org blog posts about modern crash dump analysis and debugging written in August 2006 - June 2009 for software engineers developing and maintaining products on Windows platforms, quality assurance engineers testing software on Windows platforms, technical support and escalation engineers dealing with complex software issues, security and defect researchers, computer scientists and philosophers. Unique in its breadth, depth, and scope it offers unprecedented insight into the world of Windows software and draws profound scientific and metaphysical implications.

• Title: Memory Dump Analysis Anthology: Color Supplement for Volumes 1-3
• Author: Dmitry Vostokov
• Publisher: OpenTask (May 2010)
• Language: English
• Product Dimensions: 21.6 x 14.0
• Paperback: 110 pages
• ISBN-13: 978-1906717698

Table of Contents

Modern pattern-driven software trace analysis on Microsoft and Citrix platforms requires a practical guide and OpenTask plans to publish this summer the following book in both Practical Foundations and Systematic Software Fault Analysis series:

• Title: Citrix Common Diagnostic Facility (CDF) and Microsoft Event Tracing for Windows (ETW) Software Trace Analysis: Practical Foundations
• Author: Dmitry Vostokov
• Publisher: Opentask (August 2010)
• Language: English
• Product Dimensions: 22.86 x 15.24
• ISBN: 1906717176
• ISBN-13: 978-1906717179
• Paperback: 200 pages

The following direct links can be used to order the book now:

New! Buy Kindle Edition from Amazon

Buy Paperback from Amazon

Buy Paperback from Barnes & Noble

Written by a veteran in mission-critical computer system problem resolution, problem prevention, and system recovery, this book discusses solving problems on their FIRST occurrence while emphasizing software supportability and serviceability.

• Title: First Fault Software Problem Solving: A Guide for Engineers, Managers and Users
• Author: Dan Skwire
• Publisher: Opentask (1 December 2009)
• Language: English
• Product Dimensions: 22.86 x 15.24
• ISBN: 1906717427
• ISBN-13: 978-1906717421
• Paperback: 180 pages

Table of Contents
Amazon reviews
c’t – Magazin für Computertechnik review

Who should read this book?

• Software professional engineers and managers
• End-users, system administrators and their managers
• Software engineering students

What will the readers of this book learn?

• How to optimize use of pre-existing software problem solving features
• How to choose the best products to improve first fault problem-solving
• How to get the best results when problems occur on outsourced and cloud-placed work
• How to choose amongst first-fault tools, second-fault tools, and manual problem solving methods to best advantage for difficult problems
• How to be an educated consumer or creator of future problem-solving software

What is the business value of reading this book?

• Saving money on problem solving resources (servers, storage, network, software, power, space, cooling, personnel)
• Keeping customers happier since their issues are resolved sooner
• Reducing the durations of computer service outages that affect external clients
• Decreasing operational overhead and encouraging sustainable, higher-performing organizations and enterprises through best problem-solving practices

What else is special about this book?

• 21 original illustrations to feed the soul and tickle the funny-bone
• 21 thought-provoking quotes to feed the intellect and the spirit
• An extensive bibliography to aid in clarification and personal growth

This is the first book from Windows Crash Dump Analysis tetralogy. It introduces basic definitions, tools, memory dump collection and preliminary analysis methods for Windows platforms including legacy versions. This practical guide and reference book is a must have for system administrators of Windows server platforms and client workstations, technical support engineers and general Windows users. It builds foundation for the second tetralogy book Crash Dump Analysis for System Administrators and Support Engineers and the remaining tetralogy books Windows Crash Dump Analysis and Advanced Windows Crash Dump Analysis.

• Title: Crash Dump Analysis: Practical Foundations (Windows Edition, Systematic Software Fault Analysis Series)
• Authors: Dmitry Vostokov
• Publisher: Opentask (May 2010)
• Language: English
• Product Dimensions: 22.86 x 15.24
• ISBN-13: 978-1-906717-98-8
• Paperback: 100 pages

OpenTask to offer first 3 volumes of Memory Dump Analysis Anthology in one set:

The set is available exclusively from OpenTask e-Commerce web site starting from June. Individual volumes are also available from Amazon, Barnes & Noble and other bookstores worldwide.

Product information:

• Title: Modern Memory Dump and Software Trace Analysis: Volumes 1-3
• Author: Dmitry Vostokov
• Language: English
• Product Dimensions: 22.86 x 15.24
• Paperback: 1600 pages
• Publisher: Opentask (31 May 2010)
• ISBN-13: 978-1-906717-99-5

Information about individual volumes:

• Volume 1
• Volume 2
• Volume 3

Also available: Memory Dump Analysis Anthology: Color Supplement for Volumes 1-3

Welcome to the project CARE!

CARE means Crash Analysis Report Environment. It includes a pattern-driven debugger log analyzer and standards for structured audience-driven reports.

Please help to populate the database of stack traces by submitting your WinDbg output logs. You can use VBScript / WinDbg script to process all .DMP files on your hard drives: DebuggerLogs.zip. The archive contains VBScript file for x64 WinDbg (DebuggerLogs64.vbs) and for x86 WinDbg (DebuggerLogs.vbs) plus the very simple mode-independent WinDbg script (DebuggerLogs.wds). The WinDbg output is stored in dbgeng.log file.

Note: Please do not submit your crash dumps because the file size is limited to 2 MB and CARE system is currently being designed to analyze debugger logs only. If your log is bigger you can submit a zip file. If you have any problems please contact the administrator. Please do not expect any crash analysis response for your logs. The submittal is currently for internal CARE database population only and not for the pattern analysis of your computer memory.

New! Available for Safari Books Online subscribers

The following direct links can be used to order the book now:

Buy Paperback or Hardcover from Amazon

Buy Paperback or Hardcover from Barnes & Noble

Buy Digital from Lulu

Written by the founder of DumpAnalysis.org this book is not about bugs or debugging techniques but about background knowledge everyone needs to start experimenting with x64 WinDbg, learn from practical experience and read other advanced debugging books. Solid understanding of fundamentals like pointers is needed to analyze stack traces beyond !analyze -v and lmv WinDbg commands. This is the book to help technical support and escalation engineers and Windows software testers without the knowledge of assembly language to master necessary prerequisites to understand and start debugging and crash dump analysis on x64 Windows platforms. It doesn't require any specific knowledge, fills the gap and lowers the learning curve. The book is also useful for software engineers coming from managed code or Java background, engineers coming from non-Wintel environments, Windows C/C++ software engineers without assembly language background, security researchers and beginners learning x64 Windows software disassembling and reverse engineering techniques. This book can also be used as AMD64 and Intel EM64T assembly language and x64 Windows debugging supplement for relevant undergraduate level courses. For someone, who wants to learn these foundations in the context of 32-bit Windows environments there is a separate x86 book (ISBN: 978-1-906717-10-0). However, this book is completely independent from that earlier book and almost every illustration was recreated to reflect x64 architecture and x64 Windows ILP 32-32-64 model (Integer-Long-Pointer).

Product details:

• Title: x64 Windows Debugging: Practical Foundations
• Author: Dmitry Vostokov
• Language: English
• Product Dimensions: 22.86 x 15.24

• Paperback: 194 pages
• Publisher: Opentask (17 August 2009)
• ISBN-13: 978-1-906717-56-8

• Hardcover: 194 pages
• Publisher: Opentask (15 March 2010)
• ISBN-13: 978-1-906717-92-6

Table of Contents

The following direct links can be used to order the book now:

Buy Paperback or Hardcover from Amazon

Buy Paperback or Hardcover from Barnes & Noble

Buy Paperback or Hardcover or Digital from Lulu

This is a revised, edited, cross-referenced and thematically organized volume of selected DumpAnalysis.org blog posts about crash dump analysis and debugging written in October 2008 - June 2009 for software engineers developing and maintaining products on Windows platforms, quality assurance engineers testing software on Windows platforms and technical support and escalation engineers dealing with complex software issues. The third volume features:

- 15 new crash dump analysis patterns
- 29 new pattern interaction case studies
- Trace analysis patterns
- Updated checklist
- Fully cross-referenced with Volume 1 and Volume 2
- New appendixes

Product information:

• Title: Memory Dump Analysis Anthology, Volume 3
• Author: Dmitry Vostokov
• Language: English
• Product Dimensions: 22.86 x 15.24

• Paperback: 404 pages
• Publisher: Opentask (20 December 2009)
• ISBN-13: 978-1-906717-43-8

• Hardcover: 404 pages
• Publisher: Opentask (15 March 2010)
• ISBN-13: 978-1-906717-44-5

Table of Contents

Back cover features 3D computer memory visualization image.

New! Available for Safari Books Online subscribers

The Korean edition is available:

The following direct links can be used to order the English edition now:

Buy Paperback or Hardcover from Amazon

Buy Paperback or Hardcover from Barnes & Noble

Buy Digital or Collector's Full-Color Hardcover from Lulu

The following direct links can be used to order the Korean edition now:

Acorn (The Korean translation publisher) or Kyobo book or Yes24.com

This is a revised, edited, cross-referenced and thematically organized volume of selected DumpAnalysis.org blog posts about crash dump analysis and debugging written in 2006 - 2007 for software engineers developing and maintaining products on Windows platforms, quality assurance engineers testing software on Windows platforms, technical support and escalation engineers dealing with complex software issues and general Windows users.

• Title: Memory Dump Analysis Anthology, Volume 1
• Author: Dmitry Vostokov
• Publisher: OpenTask (15 Apr 2008)
• Language: English
• Product Dimensions: 22.86 x 15.24

• Paperback: 720 pages
• ISBN-13: 978-0-9558328-0-2

• Hardcover: 720 pages
• ISBN-13: 978-0-9558328-1-9

Table of Contents
Errata
Google Book Preview

The back cover image is the picture of TestDefaultDebugger crash dump generated by Dump2Picture

Book reviews:

Caloni.com.br Blog (in Portuguese)
Amazon reviews

Testimonials:

"This book is very good to startup on debugging. It really starts from the basics and it keeps going more in depth. Easy to read and very didactic." - Yuri Diogenes, ISA Server Support Team, Microsoft (Link)

Also available:

• Title: Memory Dump Analysis Anthology Collector's Edition, Volume 1
• Hardcover (full-color): 720 pages
• ISBN-13: 978-1-9067-1701-8

This is a revised, edited, cross-referenced and thematically organized volume of selected DumpAnalysis.org blog posts about crash dump analysis and debugging written in July 2009 - January 2010 for software engineers developing and maintaining products on Windows platforms, quality assurance engineers testing software on Windows platforms and technical support and escalation engineers dealing with complex software issues. The fourth volume features:

- 13 new crash dump analysis patterns
- 13 new pattern interaction case studies
- 10 new trace analysis patterns
- 6 new Debugware patterns and case study
- Workaround patterns
- Updated checklist
- Fully cross-referenced with Volume 1, Volume 2 and Volume 3
- New appendixes

Product information:

• Title: Memory Dump Analysis Anthology, Volume 4
• Author: Dmitry Vostokov
• Language: English
• Product Dimensions: 22.86 x 15.24

• Paperback: 410 pages
• Publisher: Opentask (30 March 2010)
• ISBN-13: 978-1-906717-86-5

• Hardcover: 410 pages
• Publisher: Opentask (30 April 2010)
• ISBN-13: 978-1-906717-87-2

Back cover features memory space art image: Internal Process Combustion.

As one of the new initiatives for the Year of Debugging (2009, 0x7D9) OpenTask starts publishing full color variable page periodical publication called:

Debugged! MZ/PE: MagaZine for/from Practicing Engineers

The only serial publication dedicated entirely to Windows® debugging

The following direct links can be used to order issues now:

Order March, 2009 issue from Amazon or Barnes & Noble

Order June, 2009 issue from Amazon or Barnes & Noble

Order September, 2009 issue from Amazon or Barnes & Noble

Free version: Debugging Expert(s) Magazine Online

Sample magazine back covers featuring debugging, crash dump and software trace analysis tips:

If you have an article idea or if you'd like to write an article for us please use the following contact form:

http://www.dumpanalysis.org/contact

New! Available for Safari Books Online subscribers

The following direct links can be used to order the book now:

Buy Paperback or Hardcover from Amazon

Buy Paperback or Hardcover from Barnes & Noble

Buy Digital from Lulu

This is a revised, edited, cross-referenced and thematically organized volume of selected DumpAnalysis.org blog posts about crash dump analysis and debugging written in January - September 2008 for software engineers developing and maintaining products on Windows platforms, quality assurance engineers testing software on Windows platforms and technical support and escalation engineers dealing with complex software issues. The second volume features:

- 45 new crash dump analysis patterns
- Pattern interaction and case studies
- Updated checklist
- Fully cross-referenced with Volume 1
- New appendixes

Product information is:

• Title: Memory Dump Analysis Anthology, Volume 2
• Author: Dmitry Vostokov
• Language: English
• Product Dimensions: 22.86 x 15.24

• Paperback: 470 pages
• Publisher: Opentask (03 Oct 2008)
• ISBN-13: 978-0-9558328-7-1

• Hardcover: 470 pages
• Publisher: Opentask (01 Nov 2008)
• ISBN-13: 978-1-906717-22-3

Table of Contents
Errata
Google Book Preview

Back cover features visualized virtual process memory generated from a memory dump of colorimetric computer memory dating sample using Dump2Picture.

The following direct links can be used to pre-order the book now:

Pre-order Paperback from Amazon

This is a forthcoming reference book for technical support and escalation engineers troubleshooting and debugging complex software issues. The book is also invaluable for software maintenance and development engineers debugging unmanaged, managed and native code.

• Title: Windows Debugging Notebook: Essential Concepts, WinDbg Commands and Tools
• Authors: Roberto Alexis Farah, Dmitry Vostokov
• Language: English
• Product Dimensions: 22.86 x 15.24

• ISBN-13: 978-1-906717-00-1
• Publisher: Opentask (30 November 2009)
• Paperback: 256 pages

• ISBN-13: 978-0-9558328-5-7
• Publisher: Opentask (01 February 2010)
• Hardcover: 256 pages

Draft Table of Contents
Draft Sample Chapter

The following direct links can be used to pre-order the book now:

Pre-order Paperback from Amazon

This is a must have book for system administrators of complex Windows server platforms and client workstations to understand and choose the best course of action to address system and application crashes, hangs, CPU spikes and memory leaks. It is also invaluable to general Windows users and technical support engineers.

• Title: Crash Dump Analysis for System Administrators and Support Engineers (Windows Edition, Systematic Software Fault Analysis Series)
• Authors: Thomas Monahan, Dmitry Vostokov
• Publisher: Opentask (30 November 2009)
• Language: English
• Product Dimensions: 22.86 x 15.24
• ISBN-13: 978-1-906717-02-5
• Paperback: 180 pages

Draft Table of Contents

Requirements, Architecture, Design, Implementation and Improvement

Featured in the forthcoming book: DebugWare: The Art and Craft of Writing Troubleshooting and Debugging Tools

Memory Analysis and Debugging Institute develops x86/x64-based certification tracks for Windows and Unix (including Linux / FreeBSD / Mac OS X).
Each track consists of 3 exams, each having its own set of requirements and scope:

• Fundamentals of Memory Dump Analysis
• Intermediate Memory Dump Analysis
• Advanced Memory Dump Analysis

The initiative is supported by OpenTask.

This is a forthcoming book about architecture, design and implementation of troubleshooting and debugging tools for software technical support. Preliminary information is:

• Authors: Kapildev Ramlal, Dmitry Vostokov
• Paperback: 256 pages
• ISBN-13: 978-0-9558328-3-3
• Publisher: Opentask (15 November 2008)
• Language: English
• Product Dimensions: 22.86 x 15.24

Front cover:

Draft Table of Contents

The following direct links can be used to order the book now:

Buy from Amazon

Buy from Barnes & Noble

DLL is also a recursive acronym for DLL List Landscape. This full color book features magnificent images from process user space generated by Dump2Picture:

• Title: DLL List Landscape: The Art from Computer Memory Space
• Author: Dmitry Vostokov
• Publisher: Opentask (15 December 2008)
• Language: English
• Product Dimensions: 21.6 x 21.6
• ISBN-13: 978-1-906717-36-0
• Paperback: 16 pages

Finally Dr. Debugalov adventures are imprinted with bugs inside. The full-color book also features never published before cartoons and a few surprises. It sets a new standard for entertainment in software engineering.

The following direct links can be used to order the book now:

Buy from Amazon

Buy from Barnes & Noble

• Title: Dumps, Bugs and Debugging Forensics: The Adventures of Dr. Debugalov
• Author: Narasimha Vedala
• Editor: Dmitry Vostokov
• Publisher: Opentask (1 December 2008)
• Language: English
• Product Dimensions: 21.6 x 14.0
• ISBN-13: 978-1-906717-25-4
• Paperback: 64 pages

Table of Contents