Professional Documents
Culture Documents
m2 02foundation Windows
m2 02foundation Windows
User mode
Mode of Kernel 40
Kernel mode
HAL
Components of Kernel 20
Executive Services
1. Function of executive services
2. Object Types
3. Cache Controller
4. Configuration Manager
5. I/O Manager & it's Components
6. Local procedure call
Executive process 7. Memory manager 120
8. Process Structure
9. PnP Manager
10. Security Reference Monitor
11. Graphic Device Drivers
12. Device Drivers
3 Booting process
Pre boot sequence POST, MBR, NTLDR 60
Initial boot loader phase (ntldr)
Operating system selection (boot.ini ,
bootsect.dos)
Boot sequence 60
Hardware detection (ntdetect.com)
Configuration selection (HW profile/
configuration recovery menu)
Loads ntoskrnl.exe, hal.dll, registry, selects
Kernel load 20
the control set)
Kernel Switches Kernel Switches /3GB /PAE 20
HW key is created, Clone the control set,
Kernel initialization Load and initialize drivers, services are 20
created(smss.exe)
Win32 subsystem (winlogon.exe, lsass.exe,
screg.exe)
Types of Logon (Normal logon, Domain
logon)
Logon How does each logon process works 60
During logon process how key is generated.
Types of security (NTLM and Kerberos)
Key files and registries that are getting used
booting process
Remote booting &
How does it boot when there is multiple OS 20
installation
Hibernation Hibernating (booting flow) 20
4 File system
What is File System Creating Files and Directories
Opening & Reading Directories
40
Symbolic Links & Hard Links
File File attributes
Disk file system
Optical disks
Flash file system
Tape file system
Types of File system 30
Database file system
Network file system
Shared disk file system
Special file system
FAT
Windows file system NTFS 10
File-System-Driver
Versions
Disk Structure
FAT FAT naming convention 60
Advantages and Disadvantages of FAT File
System
Versions
Features
Disk Structure
NTFS 60
Comparison between NTFS & FAT