Icons for Memory Dump Analysis Patterns (Part 61)

Today we introduce an icon for Hooked Functions (user space) pattern:



- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -

3 Responses to “Icons for Memory Dump Analysis Patterns (Part 61)”

  1. Marc Sherman Says:

    Nice but I always picture user space sitting above kernel space. Eg. calling down into the kernel.

  2. Dmitry Vostokov Says:

    I consider calling down as kernel callbacks into user space. Kernel must be on top otherwise .NET would sit on top like a king :-) A few days ago I was contemplating different diagramming styles for such a matter and will write a blog post later today as this becomes a stylistic controversy. Thanks!

  3. Crash Dump Analysis » Blog Archive » User/Kernel Diagramming Styles Says:

    […] Internals team) and some prefer to put Kernel on top (like me). Marc Sherman in the comment here explains the former style as “calling down into the kernel”. Originally I¬†thought […]

Leave a Reply

You must be logged in to post a comment.