Exam 70-660: Win Internals for IT - Resources
RobertKaucher
Member Posts: 4,299 ■■■■■■■■■■
This thread will be a resource for the 70-660 exam. Here is how I expect to structure it:
Part I - Prereqs
* tutorials on the Fundamentsl of Memory Management, I/O etc.
* Understanding how to work with the Sysinternals tools. Practical tutiorials on how to use the major Sysinternals tools.
* Tutorials/artciles corresponding to material in the 50155A course.
Part II 70-660 Objectives.
I'll cover the objectives detailled in the MS page for the exam.
Here are some items that do not really belong in any either section:
Windows Internals 4 [PDF]
Mark Russinovich's Blog
AskPerf Blog
Another exceptionally useful tool for debugging non-crash related issues is WireShark. It is not covered by the exam but from a practical perspective should be a part of your toolkit.
Introduction to Wireshark (Part 1 of 3)
Cookies and Grabbing Passwords with Wireshark (Part 2 of 3)
Data Mining using Wireshark (Part 3 of 3)
If you prefer print material, I suggest the following:
C All-in-One Desk Reference For Dummies [The purpose is not to turn you into a programmer but to give you a basic grasp of C Programming - skim the book]
The Art of Assembly Language - [The purpose, again, is not to turn you into a developer but to give you an idea of what Assembly is and the basics of the language - skim the book]
Windows® Internals: Including Windows Server 2008 and Windows Vista, Fifth Edition (Pro Developer) - [Required Reading]
Advanced Windows Debugging - [Highly Recommended]
Part I - Prereqs
* tutorials on the Fundamentsl of Memory Management, I/O etc.
* Understanding how to work with the Sysinternals tools. Practical tutiorials on how to use the major Sysinternals tools.
* Tutorials/artciles corresponding to material in the 50155A course.
Part II 70-660 Objectives.
I'll cover the objectives detailled in the MS page for the exam.
Audience ProfileCandidates for this exam are engineers, developers, or IT staff who work with Windows at a level that requires Windows Internals knowledge. Candidates for this exam are typically in the upper echelon of the technical staff at their companies. These individuals typically hold such positions as escalation engineer, technical lead, and software design engineer. Their level of knowledge spans products both inside and outside the Microsoft Corporation. These individuals are involved in resolving problems that require deep understanding of Windows Internals rather than problems about planning and infrastructure development or how to use or configure a product that runs on Windows.
Here are some items that do not really belong in any either section:
Windows Internals 4 [PDF]
Mark Russinovich's Blog
AskPerf Blog
Another exceptionally useful tool for debugging non-crash related issues is WireShark. It is not covered by the exam but from a practical perspective should be a part of your toolkit.
Introduction to Wireshark (Part 1 of 3)
Cookies and Grabbing Passwords with Wireshark (Part 2 of 3)
Data Mining using Wireshark (Part 3 of 3)
If you prefer print material, I suggest the following:
C All-in-One Desk Reference For Dummies [The purpose is not to turn you into a programmer but to give you a basic grasp of C Programming - skim the book]
The Art of Assembly Language - [The purpose, again, is not to turn you into a developer but to give you an idea of what Assembly is and the basics of the language - skim the book]
Windows® Internals: Including Windows Server 2008 and Windows Vista, Fifth Edition (Pro Developer) - [Required Reading]
Advanced Windows Debugging - [Highly Recommended]
Comments
-
RobertKaucher Member Posts: 4,299 ■■■■■■■■■■Windows Fundamentals
General
System Internals [A collection of articles and videos]
Windows and Sysinternals Video Library [$400 for 6 DVDs]
Windows Internals and Advanced Troubleshooting [PDF - Slides]
Fundamentals
Thread vs. Process
Processes, Threads, and Jobs [Windows Internals Ch 5]
Architecture of Windows NT
UAC in Windows 7
An introductory guide to Windows Memory Management
Memory Management 101
Memory Management - Understanding Pool Resources
Memory Management - Dude where's my RAM??
RAM, virtual memory, pagefile, and memory management in Windows [Has some good links at the end]
Sessions, Desktops and Windows Stations
Windows Programming/User Mode vs Kernel Mode
Stack vs Heap Allocation
Stack and Heap
Sessions, Desktops and Windows Stations
Debug Symbols
Debugging Tools and Symbols: Getting Started
Handles
Kernel Object Handles
Using Sysinternals Tools
Process Explorer
Using Process Explorer [PDF]
Sysinternals Primer: Autoruns, Disk2vhd, ProcDump, BgInfo and AccessChk [Video from Channel9. Presented at TechEd 2011 by Aaron Morgosis]
Troubleshooting with Process Explorer, Filemon and Regmon [Video with Mark Russinovich]
Process Explorer and Malware Elimination [Video -Kind of basic but good review.]
Cases of the Unexplained [Videos by Mark Russinovich]
Windows Hang and Crash **** Analysis - Mark Russinovich
Windows Hang and Crash **** Analysis 1/9
Windows Hang and Crash **** Analysis 2/9
Windows Hang and Crash **** Analysis 3/9
Windows Hang and Crash **** Analysis 4/9
Windows Hang and Crash **** Analysis 5/9
Windows Hang and Crash **** Analysis 6/9
Windows Hang and Crash **** Analysis 7/9
Windows Hang and Crash **** Analysis 8/9
Windows Hang and Crash **** Analysis 9/9
Example Crash **** Files -
powerfool Member Posts: 1,668 ■■■■■■■■□□Thanks for starting this. This is one of the exams I have had on my consideration list. I have the Windows Internals 5th Edition just because I thought it would be a good book; it reminded me of Inside Windows 2000 Server by New Riders Publishing that I used to have and I thought it was a great book. Being a packet analysis junkie, doing system traces and such (like strace on *nix and Process Monitor on Windows) is like packet capture on the system bus.2024 Renew: [X] AZ-204 [X] AZ-305 [X] AZ-400 [X] AZ-500 [ ] Vault Assoc.
2024 New: [X] AWS SAP [ ] CKA [X] Terraform Auth/Ops Pro -
RobertKaucher Member Posts: 4,299 ■■■■■■■■■■Thanks for starting this. This is one of the exams I have had on my consideration list. I have the Windows Internals 5th Edition just because I thought it would be a good book; it reminded me of Inside Windows 2000 Server by New Riders Publishing that I used to have and I thought it was a great book. Being a packet analysis junkie, doing system traces and such (like strace on *nix and Process Monitor on Windows) is like packet capture on the system bus.
No problem. The Internals book is infact the successor of the Inside Windows book.
I agree with you about the packet capture analogy. For systems guys like me I think they go kind of hand in glove and I was going to do a section on packet analysis (for practical purposes rather than for the exam) but I think it might be better if you add a post on that. -
RobertKaucher Member Posts: 4,299 ■■■■■■■■■■I have added a few more links for the SysInternals tools. As I am reading over the Windows Internals book I am really becoming convinced that it represents the single best prep material that is in print for this exam. Currently I am looking for some test prep material that is for the 660. I've looked on SelfTest and MeasureUp, but I have found nothing.
-
the_Grinch Member Posts: 4,165 ■■■■■■■■■■To confirm, you don't need a programming background for the exam? So a cusory knowledge of C should do the trick?WIP:
PHP
Kotlin
Intro to Discrete Math
Programming Languages
Work stuff -
veritas_libertas Member Posts: 5,746 ■■■■■■■■■■I'm kind of excited about this exam. I like how deeply it delves into the OS.
-
RobertKaucher Member Posts: 4,299 ■■■■■■■■■■the_Grinch wrote: »To confirm, you don't need a programming background for the exam? So a cusory knowledge of C should do the trick?
Correct. It is for two types: people developing drivers who need strong debugging skills and IT pros who work at a very high level debugging issues with Exchange, SQL Server, etc. Developers are only a part of the audience and it is not a dev cert.
It is like a very high-lelver certification for a professional mechanic. While you will need to understand and know about the physics and architecture of the internal combustion engine you are not required to be an engineer and actually know how to design one. -
the_Grinch Member Posts: 4,165 ■■■■■■■■■■Awesome, thanks for all the info. May look at this down the line...WIP:
PHP
Kotlin
Intro to Discrete Math
Programming Languages
Work stuff -
the_Grinch Member Posts: 4,165 ■■■■■■■■■■Rob:
Saw this and figured I should post it here:
Amazon.com: Windows Internals: Covering Windows Server 2008 R2 and Windows 7 (9780735648739): Mark E. Russinovich, David A. Solomon, Alex Ionescu: Books
Looks like the 6th edition will be out before Christmas (yay!)
Also, what are your thoughts on 2008 vs 2008 R2 as far as the exam is concerned? Are there really that big of a different between the two?WIP:
PHP
Kotlin
Intro to Discrete Math
Programming Languages
Work stuff -
the_Grinch Member Posts: 4,165 ■■■■■■■■■■Also, should one add this to their list of things to read?
Amazon.com: Memory **** Analysis Anthology, Volume 2 (v. 2) (9780955832871): Dmitry Vostokov: BooksWIP:
PHP
Kotlin
Intro to Discrete Math
Programming Languages
Work stuff -
RobertKaucher Member Posts: 4,299 ■■■■■■■■■■the_Grinch wrote: »Also, should one add this to their list of things to read?
Amazon.com: Memory **** Analysis Anthology, Volume 2 (v. 2) (9780955832871): Dmitry Vostokov: Books
I think hos stuff is pretty good on a practical level. I'm not so certain about how it might help on the exam. All of his books are on Safari, if you have a subscription.
Thanks for pointing out the Vol 6 of the Internals book. I have pre-ordered it.