Windows Kernel Internals - Lightweight Procedure Calls-计算机科学

:copyright: Microsoft Corporation 1Windows Kernel Internals Lightweight Procedure CallsDavid B. Probert, Ph.D. Windows Kernel DevelopmentMicrosoft Corporation:copyright: Microsoft Corporation 2Topics• LPC overview • !lpc debugger extension • Investigation checklist • Debugging samples:copyright: Microsoft Corporation 3LPC usage• LPC is an internal interface for NT components.• Communications between two user mode components (csrss and win32, winlogon and lsass)• Communications between a user-