BlackBelt – Advanced Troubleshooting the Windows OS (Windows Internals included) with Sami Laiho

I offer two courses for troubleshooting of anything that related or runs on the Windows OS. If you’re thinking about which course to take first, take the other one. If you are totally familiar with the stuff on the other course you are very welcome to join this one as well. It’s just my professional opinion that the best troubleshooters can be taught by taking these two courses and it’s better to take the more Tools-oriented "BlackBelt Troubleshooting" course first and the join this Content-oriented "Advanced Troubleshooting" course next.

Have you ever wondered if Windows Pagefile settings should be changed or how they actually work? Have you ever wondered what the values in Task Manager actually mean – like Paged Pool, Working Set, Free memory etc? Do you know how a file actually gets cached and finally written to the disk or how threads communicate with each other? Have you ever wondered what Mutexes or Semaphores in Process Explorer really mean? If you don’t know the answers, come and join this course as it will provide you with the answers and a lot more! 
Level: 400 


This training is meant for all administrators who want to deepen their knowledge about Windows. It is also suitable for people who think they know everything about the Windows OS… It’s a very deep dive course and surely in no way suitable for beginners but seasoned administrators. If someone has gone through the BlackBelt OS Troubleshooting course then this course will deepen that knowledge even further. This course applies to all Windows version from NT 4 to Windows 10, both servers and clients. 


  • Experience with Windows Administration
  • Experience with Active Directory
  • Experience with networking infrastructure

Course goals:

This four day course teaches you how the operating system actually works under the hood. Windows Internals was previously taught globally by two of the best known teachers David Solomon and Mark Russinovich. David is now retired from training and Mark is working for Microsoft. This training is based on their Windows Internals book which is considered mandatory knowledge for all top Microsoft professionals including Microsoft’a own PFE’s (Premier Field Engineer). That book might be a bit too deep for most so this is an easy way to learn the important parts of the book in an effective pace. 

This course teaches you what you see with the tools that are used for troubleshooting. If you’re not that familiar with the tools we recommend you take the BlackBelt Troubleshooting course first – I can assure you want to take both when you get started 

Course outline:

Day 1

  • Concepts and Tools
  • System Architecture
  • System Mechanisms

Day 2

  • Management Mechanisms
  • Processes, Threads, and Jobs
  • Security

Day 3

  • Networking
  • I/O System
  • Storage Management
  • Memory Management

Day 4

  • Cache Manager
  • File Systems
  • Startup and Shutdown
  • Crash Dump Analysis

Sami Laiho

Sami Laiho is one of the world’s leading experts in the Windows OS and an exceptional teacher/entertainer. Sami’s sessions have been evaluated as best session in multiple TechEd’s over the last years. Sami has been awarded Microsoft MVP (Most Valueable Professional) in Windows OS since 2011. 
Sami has been a Windows admin for more than 15 years and a certified trainer for more than ten. Sami is a well known public speaker on Conferences in Europe, Australia etc. 

Currently Sami works for his own company as a Senior Technical Fellow and specializes in Troubleshooting and security training and consulting. Sami’s company also consults and produces products to help companies to get rid of end user admin rights. Sami is also known globally as the developer of Wioski – a free replacement for Microsoft Steady State. 

Read more about Sami Laiho on these pages: