Windows® Internals, Sixth Edition, Part 2

CC language, Structure of a DriverC processor state, Power Availability Requests, Processor Power Management (PPM), Performance CheckC runtime (CRT), Heap ManagerC++ language, Structure of a Driver, No Execute Page Protection, Software Data Execution Preventioncache, Mapped File I/O and File Caching–I/O Request Packets, Scatter/Gather I/O, I/O Request Packets, Processor Power Management (PPM), Memory Manager Components, Virtual Address Space Layouts, Translation Look-Aside Buffer–Physical Address Extension (PAE), Translation Look-Aside Buffer, Physical Address Extension (PAE), Clustered Page Faults, ReadyBoost–Unified Caching, Unified Caching, Cache Virtual Memory Management, Cache Virtual Memory Management, Cache Virtual Memory Management, Cache Working Set Size, Cache Physical Size–Cache Data Structures, Cache Physical Size, Cache Data Structures, Forcing the Cache to Write Through to Disk, Flushing Mapped Files, Write Throttling, Remote FSDs, Locking–Locking, Locking, Explicit File I/O, Cache Manager’s Read-Ahead Thread, Cache Manager’s Read-Ahead Thread, Log Types, File Names, Design, Design, ReadyBoot–ReadyBoot, ReadyBoot, ReadyBootaddress space, Cache Virtual Memory Managementcached address translations, Translation Look-Aside Buffer–Physical Address Extension (PAE), Translation Look-Aside Buffer, Physical Address Extension (PAE)CLFS operations, Log Typescoherency, Remote FSDscore parking and, Processor Power Management (PPM)file caching, Mapped File I/O and File Caching–I/O Request Packets, Scatter/Gather I/O, I/O Request Packetsflushes, Flushing Mapped Files, Write Throttling, Designforcing write-through, Forcing the Cache to Write Through to Diskopened files, Explicit File I/Ooplocks, Locking–Locking, Lockingoptimizing boot process, ReadyBoot–ReadyBoot, ReadyBoot, ReadyBootphysical size, Cache Physical Size–Cache Data Structures, Cache Physical Size, Cache Data Structuresprefetch operations, Clustered Page FaultsReadyBoost, ReadyBoost–Unified Caching, Unified Cachingreduction routines, Memory Manager Componentsspatial locality, Cache Manager’s Read-Ahead Threadsystem space, Virtual Address Space Layoutstemporal locality, Cache Manager’s Read-Ahead Threadtunneling, File Namesvirtual memory management, Cache Virtual Memory Managementvirtual size, Cache Virtual Memory Managementworking set size, Cache Working Set Sizewrite-through, Designcache buffers, File System Interfacescache bytes, Examining Memory Usagecache directory, System File CorruptionCache disabled bit (PTEs), Page Tables and Page Table Entriescache manager, Structure of a Driver, Mapped File I/O and File Caching, I/O Request Packets, Prioritization Strategies, Disk Sector Format, Look-Aside Lists, Section Objects–Driver Verifier, Driver Verifier, Single, Centralized System Cache, The Memory Manager, Cache Coherency, Cache Coherency, Cache Coherency, Recoverable File System Support, Cache Size–Cache Data Structures, Cache Working Set Size, Cache Physical Size, Cache Physical Size, Cache Data Structures–File System Interfaces, Cache Data Structures, Systemwide Cache Data Structures, Systemwide Cache Data Structures, Systemwide Cache Data Structures, Per-File Cache Data Structures, Per-File Cache Data Structures–Read-Ahead and Write-Behind, File System Interfaces–Fast I/O, File System Interfaces, File System Interfaces, File System Interfaces, File System Interfaces, Caching with the Mapping and Pinning Interfaces, Fast I/O, Fast I/O, Fast I/O–Read-Ahead and Write-Behind, Fast I/O, Read-Ahead and Write-Behind–Conclusion, Read-Ahead and Write-Behind, Read-Ahead and Write-Behind, Intelligent Read-Ahead–Write-Back Caching and Lazy Writing, Intelligent Read-Ahead, Write-Back Caching and Lazy Writing–Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing–Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Disabling Lazy Writing for a File, Write Throttling–Write Throttling, Write Throttling, Write Throttling, Conclusion, File System Driver Architecture, Cache Manager’s Lazy Writer, Cache Manager’s Read-Ahead Thread–Process Monitor, Cache Manager’s Read-Ahead Thread–Process Monitor, Cache Manager’s Read-Ahead Thread, Memory Manager’s Page Fault Handler, Process Monitor, Process Monitorcache coherency, Cache Coherency, Cache Coherency, Cache Coherencycache size, Cache Size–Cache Data Structures, Cache Working Set Size, Cache Physical Size, Cache Physical Size, Cache Data Structurescentralized system caching, Single, Centralized System Cachedata structures, Cache Data Structures–File System Interfaces, Systemwide Cache Data Structures, Systemwide Cache Data Structures, Systemwide Cache Data Structures, Per-File Cache Data Structures, File System Interfaces, File System Interfacesfast dispatch routines, Structure of a Driverfast I/O, Per-File Cache Data Structures–Read-Ahead and Write-Behind, File System Interfaces, Fast I/O, Fast I/O–Read-Ahead and Write-Behind, Fast I/O, Read-Ahead and Write-Behind, Read-Ahead and Write-Behindfile system drivers, File System Driver Architecturefile system interfaces, File System Interfaces–Fast I/O, File System Interfaces, Caching with the Mapping and Pinning Interfaces, Fast I/OI/O prioritization strategies, Prioritization Strategiesintelligent read-ahead, Intelligent Read-Ahead–Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writinglazy writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Disabling Lazy Writing for a File, Cache Manager’s Lazy Writerlook-aside lists, Look-Aside Listsmapped file I/O, Mapped File I/O and File Caching, I/O Request Packetsmemory manager operations, The Memory Managerread-ahead and write-behind, Read-Ahead and Write-Behind–Conclusion, Intelligent Read-Ahead, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Conclusionread-ahead thread, Cache Manager’s Read-Ahead Thread–Process Monitor, Memory Manager’s Page Fault Handler, Process Monitorrecoverable file system support, Recoverable File System Supportsection objects, Section Objects–Driver Verifier, Driver Verifiersector size, Disk Sector FormatSuperfetch, Cache Manager’s Read-Ahead Thread–Process Monitor, Cache Manager’s Read-Ahead Thread, Process Monitorviewing operations, Write-Back Caching and Lazy Writing–Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writingwrite throttling, Write Throttling–Write Throttling, Write Throttling, Write Throttlingwrite-back caching, Write-Back Caching and Lazy Writing–Write-Back Caching and Lazy Writing, Write-Back Caching and Lazy Writingcache misses, NTFS File System Driver, Compressing Nonsparse Datacached I/O, Opening Devicescached read operations, File System Interfaces, Write-Back Caching and Lazy Writingcall stacks, Troubleshooting Crashescallbacks, Structure of a Driver, Structure and Operation of a KMDF Driver, KMDF Data Model, KMDF I/O Modelfast dispatch routines, Structure of a DriverKMDF drivers, Structure and Operation of a KMDF Driver, KMDF Data ModelKMDF queues, KMDF I/O Modelcameras, User-Mode Driver Framework (UMDF)cancel I/O routines, Structure of a Driver, I/O Cancellation for Thread Termination, I/O Cancellation for Thread TerminationCancelIo function, User-Initiated I/O CancellationCancelSynchronousIo function, User-Initiated I/O Cancellationcanonical addresses, x64 Virtual Addressing Limitationscase-sensitive file names, POSIX SupportCAT files, I/O System Components, Driver Installationcatalog files, Driver Installation, Driver InstallationCcAdjustThrottle function, Write ThrottlingCcCanIWrite function, Write ThrottlingCcCopyRead interface, File System Interfaces, Caching with the Mapping and Pinning Interfaces, Explicit File I/OCcCopyWrite interface, File System Interfaces, Explicit File I/OCcDeferWrite function, Write ThrottlingCcFastCopyRead interface, File System Interfaces, Explicit File I/OCcFastCopyWrite interface, Explicit File I/OCcInitializeCacheMap function, File System Interfaces, Explicit File I/OCcNumberOfFreeVacbs variable, Systemwide Cache Data StructuresCcReadAheadIos variable, Intelligent Read-AheadCcSetDirtyPageThreshold function, Write ThrottlingCcTotalDirtyPages function, Write ThrottlingCcVacArrays variable, Systemwide Cache Data StructuresCcWriteBehind variable, System ThreadsCD-R/RW format, UDFCD-ROM drives, Storage Terminology, The Volume NamespaceCDFS (CD-ROM file system), I/O System Components, Windows File System Formats, Local FSDs, File Names, The BIOS Boot Sector and Bootmgrcell phones, User-Mode Driver Framework (UMDF)Certificate Manager (Certmgr.msc), Encrypting File System Securitycertificate stores, Encrypting File System SecurityCfgMgr32.dll, Driver Installationchange journal files, Compression and Sparse Files, Master File Table, The Change Journal File, The Change Journal File, The Change Journal File, Indexingchange logging, Change Loggingchange records, Change Loggingchannel element, The BIOS Boot Sector and Bootmgrcharacters in file names, File Names, File Namescheck phases (processor power), Thresholds and Policy Settings, Performance Checkcheckpoint records, Log Record Types, Log Record Types, Recoverycheckpoints (virtual machines), Virtual Hard Disk Supportchild devices, Device Enumerationchild list objects (KMDF), KMDF Data Modelchild objects (KMDF), KMDF Data Modelchild processes, Services Provided by the Memory Managerchips (TPM), BitLocker Drive Encryption, Trusted Platform Module (TPM)chipsets, 32-Bit Client Effective Memory Limits, 32-Bit Client Effective Memory Limitschkdsk command, System Hive CorruptionChkdsk.exe (Check Disk), Volume Mounting, Recovery Implementation, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery–Self-Healing, NTFS Bad-Cluster Recovery, Self-Healing, System File Corruptionbad sectors, NTFS Bad-Cluster Recoveryboot-time version, Volume MountingNTFS usage vs. FAT, NTFS Bad-Cluster Recovery–Self-Healing, NTFS Bad-Cluster Recovery, Self-Healingrepairing after failures, Recovery Implementationsystem file corruption, System File CorruptionCIFS (Common Internet File System), Remote FSDscipher block chaining, The Decryption Processcipher command, Encrypting a File for the First TimeCipher.exe, Encrypting File System Securityclass drivers, Layered Drivers, Device Stacks, Disk Drivers, Disk Class, Port, and Miniport Drivers, Disk Class, Port, and Miniport Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Drivers, Multipath I/O (MPIO) Driversclass keys, Device Stack Driver Loading, Driver InstallationClassGUID value, Device Stack Driver Loading, Device Stack Driver Loadingcleanup requests, KMDF I/O Modelclear keys, BitLocker Boot ProcessCLFS (Common Log File System), Marshalling, Log Types–Log Types, Log Types, Log Layout, Log Layout, Log Sequence Numbers, Log Sequence Numbers, Log Blocks, Translating Virtual LSNs to Physical LSNs–Translating Virtual LSNs to Physical LSNs, Translating Virtual LSNs to Physical LSNs, Translating Virtual LSNs to Physical LSNs, Management Policies, Management Policieslog blocks, Log Blockslog file layout, Log Layoutlog layout, Log Layoutlog sequence numbers, Log Sequence Numbers, Log Sequence Numberslog types, Log Types–Log Types, Log Typesmanagement policies, Management Policies, Management Policiesmarshalling, Marshallingtranslating virtual LSNs to physical, Translating Virtual LSNs to Physical LSNs–Translating Virtual LSNs to Physical LSNs, Translating Virtual LSNs to Physical LSNs, Translating Virtual LSNs to Physical LSNsClfsMgmtPolicy policies, Management Policiesclient applications, No Execute Page Protectionclient systems, Crash Dump Filesclient Windows editions, Windows Client Memory Limitsclient-side remote FSDs, Remote FSDs–File System Operation, Remote FSDs, Locking, File System Operationclock algorithm (LRU), Placement Policyclock generator crystals, Processor Power Management (PPM)clock sources, The BIOS Boot Sector and Bootmgrclone shadow copies, Clone Shadow Copiescloning processes, Process Reflection–Process Reflection, Process Reflection, Process Reflectionclose requests (KMDF), KMDF I/O ModelCloseEncryptedFileRaw function, Backing Up Encrypted FilesCloseHandle API, Transactional APIsCLRs (compensating log records), Logging Implementationcluster factor, Clusters–Master File Table, Clusters, Master File Tableclustered page faults, Clustered Page Faults, Page Files, Write-Back Caching and Lazy Writingclustermodeaddressing element, The BIOS Boot Sector and Bootmgrclusters, Solid State Disks, Partition Manager, Spanned Volumes, File Systems, File Systems–CDFS, File Systems, CDFS, CDFS, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, exFAT, Dynamic Bad-Cluster Remapping, Defragmentation, NTFS On-Disk Structure–NTFS Recovery Support, Clusters, Clusters–Master File Table, Clusters, Clusters, Master File Table, Resident and Nonresident Attributes, Compressing Sparse Data, Compressing Sparse Data, Compressing Nonsparse Data, NTFS Recovery Support, Undo Pass–Self-Healing, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, Self-Healingbad-cluster recovery, Undo Pass–Self-Healing, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, NTFS Bad-Cluster Recovery, Self-Healingcluster factor, Clusters–Master File Table, Clusters, Master File Tablecompressed files, Compressing Sparse Data, Compressing Nonsparse Datadisk attributes, Partition Managerdisk storage, Solid State DisksFAT formats, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32free and in-use, Defragmentationnoncompressed files, Compressing Sparse DataNTFS on-disk structure, NTFS On-Disk Structure–NTFS Recovery Support, NTFS Recovery Supportoffsets, translating from bytes, Spanned Volumesremapping bad, Dynamic Bad-Cluster Remappingruns, Resident and Nonresident Attributessectors and, File Systems–CDFS, File Systems, CDFSsize, File Systems, CDFS, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, FAT12, FAT16, and FAT32, exFAT, Clusters, Clustersunused, FAT12, FAT16, and FAT32CMOS settings, The BIOS Boot Sector and BootmgrCMPXCHG8B instruction, Windows x64 16-TB LimitationCNG (Cryptography Next Generation), Encrypting File System Security, Encrypting File System Securitycode integrity, Encryption Keys, The BIOS Boot Sector and Bootmgrcode overwrites (crash dumps), Code Overwrite and System Code Write Protection–Advanced Crash Dump Analysis, Code Overwrite and System Code Write Protection, Advanced Crash Dump Analysiscoherent caching schemes, Single, Centralized System Cache–Stream-Based Caching, Cache Coherency, Virtual Block Caching, Stream-Based Cachingcollection objects (KMDF), KMDF Data Modelcollided page faults, In-Paging I/O, Collided Page Faultscolor (PFN entries), PFN Data StructuresCOM components, User-Mode Driver Framework (UMDF)COM quota interfaces, Per-User Volume QuotasCOM TxF components, Transaction SupportCOM+ applications, x86 Address Space LayoutsCOM1 device name, Smss, Csrss, and WininitCommand Prompt, Safe Mode, Windows Recovery Environment (WinRE)Command Server Thread, Initializing the Kernel and Executive Subsystemscommit charge, Allocation Granularity, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and Page File Size–Commit Charge and Page File Size, Commit Charge and Page File Size, Commit Charge and Page File Size, Commit Charge and Page File Size, Commit Charge and Page File Size, Virtual Address Descriptors, Memory Notification Events–Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Eventsdefined, Allocation Granularitymemory notification events, Memory Notification Events–Memory Notification Events, Memory Notification Events, Memory Notification Events, Memory Notification Eventspage fault handling, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and Page File Size, Commit Charge and Page File Sizepage file size, Commit Charge and Page File Size–Commit Charge and Page File Size, Commit Charge and Page File Size, Commit Charge and Page File Sizevirtual address space, Virtual Address Descriptorscommit limits, Examining Memory Usage, Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limit, Commit Charge and the System Commit Limitcommit phase (VSS), VSS Operationcommit records, Logging Implementationcommitment, Commit Limitcommitted bytes, Examining Memory Usagecommitted memory, Shared Memory and Mapped Files–Shared Memory and Mapped Files, Shared Memory and Mapped Files, Heap Manager Structurecore heap and, Heap Manager Structuresection objects, Shared Memory and Mapped Files–Shared Memory and Mapped Files, Shared Memory and Mapped Filescommitted pages, Large and Small Pages–Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pages, Invalid PTEs, PFN Data Structuresmemory manager, Large and Small Pages–Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pages, Reserving and Committing Pagespage faults, Invalid PTEsworking set index field, PFN Data Structurescommitted transactions, Transactional APIs, Log Record Types, Analysis PassCommon Criteria profiles, Page List DynamicsCommon Internet File System (CIFS), Remote FSDscommon logs (CLFS), Log Types–Log Types, Log TypesCompactFlash cards, ReadyBoostCompare and Exchange 8 Bytes (CMPXCHG8B), Windows x64 16-TB LimitationCompatibility Administrator tool, No Execute Page Protectioncompatible IDs (drivers), Driver Installationcompensating log records (CLRs), Logging Implementationcomplete memory dumps, Crash Dump Files, Crash Dump Files, Crash Dump Files, Hung or Unresponsive SystemsComplete PC Restore (System Image Recover), Windows Recovery Environment (WinRE)completing IRPs, I/O Request to a Single-Layered Drivercompletion packets, The IoCompletion Object, Using Completion Ports, I/O Completion Port Operationcompletion routines, Structure of a DriverCompletionContext field, I/O Completion Port OperationCompletionKey parameter, I/O Completion Port Operationcompliance logging (CLFS), Common Log File Systemcomponent entries (LDM), The LDM Database–The LDM Database, The LDM Database, The LDM Databasecompression, ReadyBoost, Compression and Sparse Files, Data Compression and Sparse Files–The Change Journal File, Compressing Nonsparse Data, Compressing Nonsparse Data, Compressing Nonsparse Data, The Change Journal Filecompression units, Compressing Nonsparse Datacomputers, lost or stolen, BitLocker Drive Encryptionconcurrency (KMDF), KMDF I/O Model, KMDF I/O Modelconcurrency values, The IoCompletion Object, Using Completion Ports, I/O Completion Port Operationconfigaccesspolicy element, The BIOS Boot Sector and Bootmgrconfigflags element, The BIOS Boot Sector and Bootmgrconfiguration changes, PnP, The Plug and Play (PnP) Managerconfiguration manager, Driver Installation, Monitoring Pool Usage, Smss, Csrss, and Wininit, Smss, Csrss, and Wininit, Shutdowncore registry hives, Smss, Csrss, and Wininitloading registry hives, Smss, Csrss, and Wininitmemory allocations, Monitoring Pool UsagePnP hardware installation, Driver Installationshutting down, Shutdownconserving energy, Driver and Application Control of Device Powerconsole applications, Shutdownconsolidated security, Indexing, Consolidated Security, Consolidated Security, Consolidated Securitycontainer IDs, Device Stack Driver Loading–Device Stack Driver Loading, Device Stack Driver Loading, Device Stack Driver Loadingcontainer indexes, Log Sequence Numberscontainer notifications, Container Notificationscontainers, Common Log File System, Management Policiescontent indexing, I/O Prioritiescontention, resources under, Hung or Unresponsive Systemscontext agent (scenario manager), Componentscontext control blocks (CCBs), Log TypesCONTEXT structure, The BIOS Boot Sector and Bootmgrcontext switching, I/O Completion Ports, Page Directoriescontrol areas (section objects), Section Objects, Section Objects, Section Objects, Section Objects, Driver Verifiercontrol backoff, Prioritization Strategiescontrol block data structures, I/O Completion Port Operation–I/O Completion Port Operation, I/O Completion Port Operation, I/O Completion Port Operationcontrol sets, Last Known Good, Post–Splash Screen Crash or Hangcontrol vectors, Initializing the Kernel and Executive Subsystemscontroller objects, Initializing the Kernel and Executive Subsystemsconverting leases, Lockingcookies, Software Data Execution Preventioncopy APIs, Transactional APIscopy method, File System Interfacescopy protection mechanisms, No Execute Page Protectioncopy-on-write, Volume Shadow Copy Service, Shadow Copy Provider–Uses in Windows, Shadow Copy Provider–Uses in Windows, Shadow Copy Provider, Shadow Copy Provider, Shadow Copy Provider, Shadow Copy Provider, Uses in Windows, Uses in Windows, Uses in Windows, Previous Versions and System Restore, Previous Versions and System Restore, Memory Management, Commit Charge and the System Commit Limit, Process Reflectioncloned processes, Process Reflectioncommit charge, Commit Charge and the System Commit Limitdifferential copies, Shadow Copy Provider–Uses in Windows, Shadow Copy Provider, Uses in Windows, Uses in Windowsfiles not copied, Shadow Copy Providermemory manager, Memory ManagementPrevious Versions feature, Previous Versions and System RestoreShadow Copy Provider, Shadow Copy Provider–Uses in Windows, Shadow Copy Provider, Uses in Windowsvolume copies, Volume Shadow Copy Service, Shadow Copy Provider, Previous Versions and System RestoreCopy-on-write bit (PTEs), Page Tables and Page Table Entriescopying files, File System Interfaces, Write-Back Caching and Lazy Writing, Copying Encrypted Filescore heap, Heap Manager Structure, The Low Fragmentation Heapcore parking, Core Parking Policies, Utility Function, Increase/Decrease Actions–Thresholds and Policy Settings, Thresholds and Policy Settings–Thresholds and Policy Settings, Thresholds and Policy Settings, Thresholds and Policy Settings, Thresholds and Policy Settings, Thresholds and Policy Settings, Thresholds and Policy Settings, Performance Check, Performance Check–Performance Check, Performance Checkincrease/decrease actions, Increase/Decrease Actions–Thresholds and Policy Settings, Thresholds and Policy Settings, Thresholds and Policy Settingspolicies, Core Parking Policies, Thresholds and Policy SettingsPPM parking and unparking, Performance Checkthresholds and policy settings, Thresholds and Policy Settings–Thresholds and Policy Settings, Thresholds and Policy Settings, Thresholds and Policy Settingsviewing, Performance Check–Performance Check, Performance Checkviewing processor history, Utility FunctionCORE_PARKING_POLICY_CHANGE_IDEAL value, Increase/Decrease ActionsCORE_PARKING_POLICY_CHANGE_ROCKET value, Increase/Decrease ActionsCORE_PARKING_POLICY_CHANGE_STEP value, Increase/Decrease Actionscorruption, Synchronization, VSS Operation, The Low Fragmentation Heap–Heap Debugging Features, Heap Debugging Features, Pageheap, Fault Tolerant Heap, Windows Client Memory Limits, Recoverable File System Support, Self-Healing–Encrypting File System Security, Self-Healing, Encrypting File System Security, Solving Common Boot Problems–Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hang, Using Crash Troubleshooting Tools–Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, 0xC5 - DRIVER_CORRUPTED_EXPOOL, 0xC5 - DRIVER_CORRUPTED_EXPOOLboot problems, Solving Common Boot Problems–Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hangcache management, Recoverable File System Supportcrash dump tools, Using Crash Troubleshooting Tools–Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pooldriver synchronization, Synchronizationfault tolerant heap, Fault Tolerant Heapheap manager, The Low Fragmentation Heap–Heap Debugging Features, Heap Debugging Featureslarge physical addresses, Windows Client Memory Limitspageheap, Pageheappool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, 0xC5 - DRIVER_CORRUPTED_EXPOOL, 0xC5 - DRIVER_CORRUPTED_EXPOOLself-healing volumes, Self-Healing–Encrypting File System Security, Self-Healing, Encrypting File System Securitysize of, Buffer Overruns, Memory Corruption, and Special PoolVSS shadow copies, VSS Operationcosts, computing for nodes, NUMAcover files (BitLocker To Go), BitLocker To GoCR-R format, UDFCR3 register, Page Directoriescrash buttons, Hung or Unresponsive Systems.crash command, Hung or Unresponsive Systemscrash dump drivers, Crash Dump Filescrash dumps, Examining Memory Usage, Systemwide Cache Data Structures, Why Does Windows Crash?–The Blue Screen, The Blue Screen–Troubleshooting Crashes, The Blue Screen, The Blue Screen–Troubleshooting Crashes, Causes of Windows Crashes, Troubleshooting Crashes, Troubleshooting Crashes, Troubleshooting Crashes–Crash Dump Files, Troubleshooting Crashes, Troubleshooting Crashes, Crash Dump Files, Crash Dump Files, Crash Dump Files, Crash Dump Files, Crash Dump Files, Crash Dump Files–Crash Dump Generation, Crash Dump Generation, Crash Dump Generation, Crash Dump Generation, Crash Dump Generation, Crash Dump Generation, Crash Dump Generation, Windows Error Reporting–Windows Error Reporting, Windows Error Reporting, Windows Error Reporting, Online Crash Analysis–Notmyfault, Basic Crash Dump Analysis–Verbose Analysis, Basic Crash Dump Analysis, Notmyfault, Basic Crash Dump Analysis, Basic Crash Dump Analysis, Verbose Analysis, Verbose Analysis–Verbose Analysis, Verbose Analysis, Verbose Analysis, Using Crash Troubleshooting Tools–Advanced Crash Dump Analysis, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool–Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Code Overwrite and System Code Write Protection, Advanced Crash Dump Analysis–When There Is No Crash Dump, Advanced Crash Dump Analysis, Advanced Crash Dump Analysis, Stack Trashes, Stack Trashes, Hung or Unresponsive Systems–When There Is No Crash Dump, Hung or Unresponsive Systems, Hung or Unresponsive Systems, When There Is No Crash Dump, When There Is No Crash Dump–When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dump, Analysis of Common Stop Codes–0xC5 - DRIVER_CORRUPTED_EXPOOL, 0xD1 - DRIVER_IRQL_NOT_LESS_OR_EQUAL, 0xC5 - DRIVER_CORRUPTED_EXPOOL, 0xC5 - DRIVER_CORRUPTED_EXPOOL, Hardware Malfunctionsadvanced analysis, Advanced Crash Dump Analysis–When There Is No Crash Dump, Advanced Crash Dump Analysis, Stack Trashes, Stack Trashes, Hung or Unresponsive Systems, Hung or Unresponsive Systems, When There Is No Crash Dump, When There Is No Crash Dumpbasic analysis, Basic Crash Dump Analysis–Verbose Analysis, Basic Crash Dump Analysis, Basic Crash Dump Analysis, Verbose Analysis, Verbose Analysisblue screen crashes, The Blue Screen–Troubleshooting Crashes, The Blue Screen–Troubleshooting Crashes, Troubleshooting Crashes, Troubleshooting Crashes, Troubleshooting Crashescapturing data in dump files, Crash Dump Files, Crash Dump Files, Crash Dump Files, Crash Dump Generation, Crash Dump Generation, Crash Dump Generationdisplaying VACBs, Systemwide Cache Data Structuresdrivers, Crash Dump Generationgenerating files, Crash Dump Generationhardware malfunctions, Hardware Malfunctionshung/unresponsive systems, Hung or Unresponsive Systems–When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dumpmemory corruption, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Poolmemory information, Examining Memory Usageno dump file available, When There Is No Crash Dump–When There Is No Crash Dump, When There Is No Crash Dump, When There Is No Crash Dumponline analysis, Online Crash Analysis–Notmyfault, Basic Crash Dump Analysis, Notmyfaultreasons for crashes, Why Does Windows Crash?–The Blue Screen, The Blue Screensending to Microsoft, Windows Error Reporting–Windows Error Reporting, Windows Error Reporting, Windows Error Reportingspecial pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool–Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Pool, Buffer Overruns, Memory Corruption, and Special Poolstop code analysis, Analysis of Common Stop Codes–0xC5 - DRIVER_CORRUPTED_EXPOOL, 0xD1 - DRIVER_IRQL_NOT_LESS_OR_EQUAL, 0xC5 - DRIVER_CORRUPTED_EXPOOL, 0xC5 - DRIVER_CORRUPTED_EXPOOLsystem code write protection, Code Overwrite and System Code Write Protectiontop 20 stop codes, Causes of Windows Crashes, Troubleshooting Crashestroubleshooting crashes, Troubleshooting Crashes–Crash Dump Files, Crash Dump Files, Crash Dump Filestroubleshooting tools, Using Crash Troubleshooting Tools–Advanced Crash Dump Analysis, Advanced Crash Dump Analysistroubleshooting without files, When There Is No Crash Dumpverbose analysis, Verbose Analysis–Verbose Analysis, Verbose Analysisviewing, Crash Dump Files–Crash Dump Generation, Crash Dump GenerationCrashControl registry key, Troubleshooting CrashesCrashdmp.sys driver, Crash Dump Generationcrashes, NTFS Recovery Support, Solving Common Boot Problems–Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hang, Causes of Windows Crashes, Troubleshooting Crashes, Troubleshooting Crashes–Crash Dump Files, Crash Dump Files, Crash Dump Files, Notmyfault–Basic Crash Dump Analysis, Basic Crash Dump Analysis, Hardware Malfunctionsboot problems, Solving Common Boot Problems–Post–Splash Screen Crash or Hang, Post–Splash Screen Crash or Hanghardware malfunctions, Hardware Malfunctionsmanual system crashes, Crash Dump FilesNotmyfault manual crashes, Notmyfault–Basic Crash Dump Analysis, Basic Crash Dump Analysisrecovery and, NTFS Recovery Supporttop 20 stop codes, Causes of Windows Crashes, Troubleshooting Crashestroubleshooting, Troubleshooting Crashes–Crash Dump Files, Crash Dump FilesCRC (cyclic redundancy checksums), GUID Partition Table Partitioningcreate APIs, Transactional APIscreate operations, User-Initiated I/O Cancellation, KMDF I/O ModelCreateFile function, Opening Devices, I/O Processing, Disk Device Objects, Cache Virtual Memory Management, Intelligent Read-Ahead, Forcing the Cache to Write Through to Disk, File System Operationactive files, Cache Virtual Memory Managementasynchronous I/O, I/O Processingopening disks, Disk Device Objectsopening file objects, Opening Devices, File System Operationsequential file access, Intelligent Read-Aheadwrite-through, Forcing the Cache to Write Through to DiskCreateFileMapping function, Mapped File I/O and File Caching, Shared Memory and Mapped Files, Transactional APIsCreateFileMappingNuma function, Services Provided by the Memory Manager, Shared Memory and Mapped FilesCreateHardLink function, Hard LinksCreateIoCompletionPort function, Using Completion PortsCreateMemoryResourceNotification function, Memory Notification EventsCreateRemoteThread function, Reserving and Committing PagesCreateThread function, Reserving and Committing Pagescredential providers, Smss, Csrss, and WininitCritical I/O priority, I/O Priorities, Prioritization Strategies, Prioritization Strategiescritical object crashes, Causes of Windows Crashes–Troubleshooting Crashes, Causes of Windows Crashes, Troubleshooting Crashescritical processes, Smss, Csrss, and Wininit, Smss, Csrss, and Wininitcritical threads, Smss, Csrss, and WininitCRITICAL_OBJECT_TERMINATION stop code, Causes of Windows Crashes–Troubleshooting Crashes, Causes of Windows Crashes, Troubleshooting Crashescross-process memory access, Reserving and Committing Pages, Virtual Address Space LayoutsCRTM (Core Root of Trust of Measurement), Trusted Platform Module (TPM)Cryptography Next Generation (CNG), Encrypting File System SecurityCsrss.exe (Windows subsystem process), Virtual Address Space Layouts, Smss, Csrss, and Wininit, Smss, Csrss, and Wininit, Smss, Csrss, and Wininit, Smss, Csrss, and Wininit, Shutdown–Shutdown, Shutdown, Shutdownboot process, Smss, Csrss, and Wininit, Smss, Csrss, and Wininit, Smss, Csrss, and Wininitinitialization tasks, Smss, Csrss, and Wininitpaged pool area, Virtual Address Space Layoutsshutdown functions, Shutdown–Shutdown, Shutdown, ShutdownCTRL_LOGOFF_EVENT event, ShutdownCTRL_SHUTDOWN_EVENT event, Shutdowncurrent byte offsets, Opening Devices, Opening Devicescurrent threads, Advanced Crash Dump Analysiscustomactions element, The BIOS Boot Sector and Bootmgrcyclic redundancy checksums (CRC), GUID Partition Table Partitioning