Fundamentals of Physical Memory Analysis (Software Diagnostics Services Seminars)

This is the full transcript of Software Diagnostics Services seminar (30th of December 2013) about physical memory analysis on desktop and server Windows platforms (a revised version of the previous seminars on complete crash and hang memory dump analysis). Topics include: memory acquisition and its tricks; user vs. kernel vs. physical memory space; fibre bundle space; challenges of physical memory analysis; common WinDbg commands; memory analysis patterns and their classification; common mistakes; a hands-on WinDbg analysis example with logs; a guide to further study.