Conceptual, architectural explainers — how a subsystem actually works underneath.
A bounded explanation of Windows ALPC ports, connection and communication channels, messages, shared views, security context, RPC use, and observability.
A driver-engineering guide to Windows minifilter registration, operations, instances, altitudes, pre/post callbacks, contexts, communication, and testing.
A practical map of Windows kernel objects, per-process handles, the Object Manager namespace, symbolic links, sessions, access checks, and inspection tools.
A version-aware ReFS guide covering checksummed metadata and data, Storage Spaces repair, scrubbing, block cloning, sparse VDL, workloads, and support limits.
How Windows Hello provisions device-bound credentials, how passkeys use WebAuthn, what biometrics unlock, how attestation and recovery work, and key limits.
How a Windows WSL launcher registers a rootfs, configures distribution identity and default UID, handles first run, invokes WSL APIs, and updates safely.
A forensic WSL migration guide separating Linux root-file-system contents from Windows registration, launcher identity, default user, VHD state, and secrets.
A boundary-focused guide to Hyper-V socket transport in WSL 2, service identifiers, AF_VSOCK and AF_HYPERV sides, framing, identity, lifetime, and testing.
A precise model of WSL 2 NAT and mirrored networking, localhost proxying, listener addresses, IPv4 and IPv6, firewalls, remote LAN access, and diagnosis.
How WSL ext4.vhdx allocation grows, what sparse mode and discard can reclaim, why deletion is not compaction, and how to back up, change, and verify safely.