Conceptual, architectural explainers — how a subsystem actually works underneath.
How the Service Control Manager starts, stops, and supervises background processes, and how to configure and debug a service directly.
How vulnerability scanners actually inspect container image layers, how to read a scan report, and the practices that reduce real supply-chain risk.
DOS had no scheduler and no processes in the modern sense — so how did pop-up utilities, mouse drivers, and print spoolers run 'in the background'? By staying resident and hooking interrupts.
Why DOS memory is split into distinct regions with different rules, and how HIMEM.EXE and EMM386.EXE make more of it usable.
How NTFS's Master File Table, transaction journal, and lesser-known features like alternate data streams actually work.
The two-phase filter-and-score process the Kubernetes scheduler uses to decide which node a pod lands on, and how to influence it.
How a FreeDOS machine goes from the boot sector to a command prompt, and how CONFIG.SYS and AUTOEXEC.BAT configure everything along the way.
How a modern Windows machine goes from firmware to a running kernel, and where each stage's configuration actually lives.
How Podman's daemon-less, fork-exec architecture differs from Docker's client-daemon model, and what that means for rootless containers in production.
How the registry's hive files, keys, and value types work under the hood, and the tools to inspect and edit them safely.