corpus.blog
41554 blogs · [ { "id": "01a087ad-1913-7360-9a89-bd60b2ae8432", "title": "The Case of the Ever-Increasing SYSTEM Handle Count", "url": "https://needleinathreadstack.wordpress.com/2025/11/26/the-case-of-the-ever-increasing-system-handle-count/", "published_at": "2025-11-26T20:56:20+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8dfb3672f", "title": "Doing the Microsoft Word Save Dance", "url": "https://needleinathreadstack.wordpress.com/2025/09/09/doing-the-microsoft-word-save-dance/", "published_at": "2025-09-09T16:44:43+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8dfbe9fd5", "title": "Driver Installation Pitfalls", "url": "https://needleinathreadstack.wordpress.com/2025/01/24/driver-installation-pitfalls/", "published_at": "2025-01-25T03:47:36+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8e032c400", "title": "Debugging Python for Fame and Blog Posts", "url": "https://needleinathreadstack.wordpress.com/2024/08/26/debugging-python-for-fame-and-blog-posts/", "published_at": "2024-08-26T20:01:54+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8e061985b", "title": "Windbg Cookbook: Attach to a PPL Process from UM", "url": "https://needleinathreadstack.wordpress.com/2023/06/09/windbg-cookbook-attach-to-a-ppl-process-from-um/", "published_at": "2023-06-09T19:53:23+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8e1598a22", "title": "Creating a process without starting it", "url": "https://needleinathreadstack.wordpress.com/2023/05/19/creating-a-process-without-starting-it/", "published_at": "2023-05-19T18:42:09+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8e1a00d0e", "title": "Learning about Rundown References (aka Failing to Track Down a Reference Leak)", "url": "https://needleinathreadstack.wordpress.com/2023/04/08/learning-about-rundown-references-aka-failing-to-track-down-a-reference-leak/", "published_at": "2023-04-08T15:19:20+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8e20a9657", "title": "Compiler:1, Filter Verifier:0 –OR– Why Your Mother Told You that Stackwalking is Dangerous", "url": "https://needleinathreadstack.wordpress.com/2023/01/27/compiler-1-filter-verifier0-or-why-your-mother-told-you-that-stackwalking-is-dangerous/", "published_at": "2023-01-27T16:50:17+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8e26bfce9", "title": "Decoding Kernel ETLs More Easily!", "url": "https://needleinathreadstack.wordpress.com/2021/07/30/decoding-kernel-etls-more-easily/", "published_at": "2021-07-30T15:59:48+00:00" }, { "id": "01a087ad-1914-7262-b5dc-11f8e340e5b0", "title": "File ID Cheat Sheet", "url": "https://needleinathreadstack.wordpress.com/2020/09/22/file-id-cheat-sheet/", "published_at": "2020-09-23T02:45:10+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf58f4dfe", "title": "Fixing compile failure: ..\\minidumpapiset.h(1328, 0): error C2143: syntax error: missing ‘;’ before ‘}’", "url": "https://needleinathreadstack.wordpress.com/2020/08/25/fixing-compile-failure-minidumpapiset-h1328-0-error-c2143-syntax-error-missing-before/", "published_at": "2020-08-25T16:54:05+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf66e6bb7", "title": "Re-Purposing the Calculator Button on my Keyboard", "url": "https://needleinathreadstack.wordpress.com/2019/08/28/re-purposing-the-calculator-button-on-my-keyboard/", "published_at": "2019-08-28T13:41:57+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf6a673c4", "title": "Oplock Cheat Sheet", "url": "https://needleinathreadstack.wordpress.com/2019/04/16/oplock-cheat-sheet/", "published_at": "2019-04-16T11:06:10+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf6eb58ae", "title": "Tracking Down a FILE_OBJECT leak", "url": "https://needleinathreadstack.wordpress.com/2019/02/06/tracking-down-a-file_object-leak/", "published_at": "2019-02-06T16:52:30+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf7206d23", "title": "64-bit HANDLEs can be truncated to 32-bits", "url": "https://needleinathreadstack.wordpress.com/2019/02/02/64-bit-handles-can-be-truncated-to-32-bits/", "published_at": "2019-02-02T16:55:15+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf741cee8", "title": "IO_IGNORE_SHARE_ACCESS_CHECK", "url": "https://needleinathreadstack.wordpress.com/2018/04/09/io_ignore_share_access_check/", "published_at": "2018-04-09T22:00:57+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf748fd82", "title": "Finding an Exception in a user-mode minidump", "url": "https://needleinathreadstack.wordpress.com/2018/04/06/finding-an-exception-in-user-mode-minidump/", "published_at": "2018-04-06T18:17:32+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf842900d", "title": "Different Ways to View Assembly Code", "url": "https://needleinathreadstack.wordpress.com/2018/02/08/different-ways-to-view-assembly-code/", "published_at": "2018-02-08T23:52:11+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf914a2f4", "title": "Preventing System DLL Sideload Attacks", "url": "https://needleinathreadstack.wordpress.com/2017/09/22/preventing-system-dll-sideload-attacks/", "published_at": "2017-09-22T15:15:04+00:00" }, { "id": "01a0bb99-c324-73ac-b642-84baf9c118f3", "title": "MEX is Your Friend: Analyzing 32-bit Processes in a 64-bit Kernel Dump", "url": "https://needleinathreadstack.wordpress.com/2017/05/15/mex-is-your-friend-analyzing-32-bit-processes-in-a-64-bit-kernel-dump/", "published_at": "2017-05-15T17:25:14+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e129b584be", "title": "Windows Subystem For Linux – File Reads", "url": "https://needleinathreadstack.wordpress.com/2017/01/20/windows-subystem-for-linux-file-reads/", "published_at": "2017-01-20T15:43:18+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12a761a8e", "title": "Why does Notepad++ hang when I open it?", "url": "https://needleinathreadstack.wordpress.com/2016/05/12/why-does-it-take-notepad-20-seconds-to-open/", "published_at": "2016-05-12T15:21:57+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12a7fa331", "title": "Symbols Do Not Load in Windows Performance Analyzer (WPA)", "url": "https://needleinathreadstack.wordpress.com/2015/11/25/symbols-do-not-load-in-windows-performance-analyzer-wpa/", "published_at": "2015-11-25T16:05:35+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12ab65d92", "title": "Recovering a Deleted Draft in Gmail", "url": "https://needleinathreadstack.wordpress.com/2015/06/10/recovering-a-deleted-draft-in-gmail/", "published_at": "2015-06-10T23:30:18+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12b396c52", "title": "Vmware-hostd Listening on HTTPS Port 443", "url": "https://needleinathreadstack.wordpress.com/2015/04/28/vmware-hostd-listening-on-https-port-443/", "published_at": "2015-04-28T14:07:34+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12bbc2d4f", "title": "Debugging Windows Service Startup Using Procdump", "url": "https://needleinathreadstack.wordpress.com/2015/03/24/debugging-windows-service-startup-using-procdump/", "published_at": "2015-03-24T21:24:32+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12bf18741", "title": "Performance Analysis Toolbox: Timeouts", "url": "https://needleinathreadstack.wordpress.com/2014/06/03/performance-analysis-toolbox-timeouts/", "published_at": "2014-06-03T23:33:45+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12c3986e7", "title": "Build 2014: Favourite Sessions", "url": "https://needleinathreadstack.wordpress.com/2014/05/28/build-2014-favourite-sessions/", "published_at": "2014-05-28T18:06:52+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12d180eaa", "title": "Visual Studio Productivity Power Tools 2013 Kills Productivity", "url": "https://needleinathreadstack.wordpress.com/2014/04/23/visual-studio-productivity-power-tools-2013-kills-productivity/", "published_at": "2014-04-23T19:46:56+00:00" }, { "id": "01a0bba0-b022-7185-8abc-a2e12d76076d", "title": "Troubleshooting Windows Startup Using Autoruns", "url": "https://needleinathreadstack.wordpress.com/2014/04/17/troubleshooting-windows-startup-using-autoruns/", "published_at": "2014-04-17T08:00:13+00:00" }, { "id": "01a0bba6-4972-72c3-8de2-9fe17e521c85", "title": "Writing a WPA Regions of Interest File", "url": "https://needleinathreadstack.wordpress.com/2014/04/08/writing-a-wpr-regions-of-interest-file/", "published_at": "2014-04-08T16:41:41+00:00" }, { "id": "01a0bba6-4973-710d-815c-6104e8ae1c55", "title": "Writing a Very Simple WPR Profile", "url": "https://needleinathreadstack.wordpress.com/2014/02/27/writing-a-very-simple-wpr-profile/", "published_at": "2014-02-27T22:22:00+00:00" }, { "id": "01a0bba6-4973-710d-815c-6104e940d2ce", "title": "Why does Windows Performance Analyzer Disappear When I Load a Trace?", "url": "https://needleinathreadstack.wordpress.com/2013/11/04/why-does-windows-performance-analyze-disappear-when-i-load-a-trace/", "published_at": "2013-11-04T22:36:18+00:00" }, { "id": "01a0bba6-4973-710d-815c-6104ea388169", "title": "Why does Explorer hang when I right-click on a folder?", "url": "https://needleinathreadstack.wordpress.com/2013/09/20/why-does-explorer-hang-when-i-right-click-on-a-folder/", "published_at": "2013-09-20T16:00:28+00:00" }, { "id": "01a0bba6-4973-710d-815c-6104ea9e6252", "title": "Why Won’t My Workstation Lock?", "url": "https://needleinathreadstack.wordpress.com/2013/09/13/why-wont-my-workstation-lock/", "published_at": "2013-09-13T18:11:23+00:00" } ] posts Claim your blog
Back to needleinathreadstack.wordpress.com
Blog · corpus.blog/blogs/needleinathreadstack.wordpress.com/posts

needleinathreadstack.wordpress.com

needleinathreadstack.wordpress.com

2025

The Case of the Ever-Increasing SYSTEM Handle Countoriginal ↗
26 Nov 2025
Doing the Microsoft Word Save Danceoriginal ↗
9 Sept 2025
Driver Installation Pitfallsoriginal ↗
25 Jan 2025

2024

Debugging Python for Fame and Blog Postsoriginal ↗
26 Aug 2024

2023

Windbg Cookbook: Attach to a PPL Process from UMoriginal ↗
9 Jun 2023
Creating a process without starting itoriginal ↗
19 May 2023
Learning about Rundown References (aka Failing to Track Down a Reference Leak)original ↗
8 Apr 2023
Compiler:1, Filter Verifier:0 –OR– Why Your Mother Told You that Stackwalking is Dangerousoriginal ↗
27 Jan 2023

2021

Decoding Kernel ETLs More Easily!original ↗
30 Jul 2021

2020

File ID Cheat Sheetoriginal ↗
23 Sept 2020
Fixing compile failure: ..\minidumpapiset.h(1328, 0): error C2143: syntax error: missing ‘;’ before ‘}’original ↗
25 Aug 2020

2019

Re-Purposing the Calculator Button on my Keyboardoriginal ↗
28 Aug 2019
Oplock Cheat Sheetoriginal ↗
16 Apr 2019
Tracking Down a FILE_OBJECT leakoriginal ↗
6 Feb 2019
64-bit HANDLEs can be truncated to 32-bitsoriginal ↗
2 Feb 2019

2018

IO_IGNORE_SHARE_ACCESS_CHECKoriginal ↗
9 Apr 2018
Finding an Exception in a user-mode minidumporiginal ↗
6 Apr 2018
Different Ways to View Assembly Codeoriginal ↗
8 Feb 2018

2017

Preventing System DLL Sideload Attacksoriginal ↗
22 Sept 2017
MEX is Your Friend: Analyzing 32-bit Processes in a 64-bit Kernel Dumporiginal ↗
15 May 2017
Windows Subystem For Linux – File Readsoriginal ↗
20 Jan 2017

2016

Why does Notepad++ hang when I open it?original ↗
12 May 2016

2015

Symbols Do Not Load in Windows Performance Analyzer (WPA)original ↗
25 Nov 2015
Recovering a Deleted Draft in Gmailoriginal ↗
10 Jun 2015
Vmware-hostd Listening on HTTPS Port 443original ↗
28 Apr 2015
Debugging Windows Service Startup Using Procdumporiginal ↗
24 Mar 2015

2014

Performance Analysis Toolbox: Timeoutsoriginal ↗
3 Jun 2014
Build 2014: Favourite Sessionsoriginal ↗
28 May 2014
Visual Studio Productivity Power Tools 2013 Kills Productivityoriginal ↗
23 Apr 2014
Troubleshooting Windows Startup Using Autorunsoriginal ↗
17 Apr 2014
Writing a WPA Regions of Interest Fileoriginal ↗
8 Apr 2014
Writing a Very Simple WPR Profileoriginal ↗
27 Feb 2014

2013

Why does Windows Performance Analyzer Disappear When I Load a Trace?original ↗
4 Nov 2013
Why does Explorer hang when I right-click on a folder?original ↗
20 Sept 2013
Why Won’t My Workstation Lock?original ↗
13 Sept 2013