What are the 4 Design goals of Windows?

3. What are the 2 processor rings/ privilege levels?

This privelege mode is closest to the hardware and can perform almost any action?

This Privilege level is closer to the user and limited in permission and authority...

A _____ is comprised of a static sequence of instructions compiled with file name extensions of .exe.

What is a Process?

What is considered to be a container with ingredients (executing application's required resources)?

-Consists of callable functions implemented as a subsystem.
-Uses Dynamic Link Libraries (DLL's)
-makes it easier for programmers to create do their jobs

What is a set of callable functions and subroutines?
-these cannot be executed individually
-must function in the context of a process
-Can be shared by multiple processes

Native API

Who is that guy who takes care of it?
-A kernel-loadable module
-operates between the hardware and the Executive

hal.dll?

What does the Ntoskrnl.exe do?
and
When does it happen?

What does the HAL do?

Where is the Kernel located?

The Kernel is object-oriented and had what four main responsibilities?

Threads are like what?

The Windows system call handler that verifies and provides kernel services?

What are the 8 managers in the Executive?

Provides standardized interface for every system object.

creates, manages, and terminates processes and threads

Provides private address space for each process
IE:RAM/Swap file

processes all file AND I/O requests.

AKA the club Bouncer:
Enforces local computer security policy

Passes messages between client and server processes on the same computer

works closely with the I/O Manger:
determines which drivers are required to support a particular device and loads loads those drivers.

implements and manages the registry

What is Registry?

What are the 4 ways windows defines an object?

Are used as a mechanism for referring to an object indirectly.

Object Manager what two main things?

What is the following describing?
1. Object Name
2. Object Descriptor
3. Open Handle Count
4. Object Type
5. Reference Count

makes an object visible to other processes for sharing

Determines who can use the object and what they can do with it

Counts the number of times a handle has been opened to an object

Points to a type of object that contains attributes common to objects of this type

counts the number of times a kernel mode component has referenced the address object

What does the Executive Manager provide to the object manger?

What are methods in regards to the Object Manager?

The Object manager uses a ____ to contain and manage this common data for each class object. (MASTER MOLD)

The communication interfaces to the kernel services being requested.

What does Object Retention rely on?

Open handle count
(Accountability)

Reference Count
(Pointers)

The object manger implements object retention in what 2 phases?

Name Retention

Object Deletion

What is known as resource accounting?

How does the object manger build the security descriptor information?

what are the two types of ACL's contained in the security descriptor?

DACL

SACL

what does the Security Reference Manager (SRM) do?

this generates most of the audit records in the security event log