Skip to main contentSkip to main content
Room Banner
Back to all walkthroughs
Room Icon

Windows Internals

Premium room

Learn and understand the fundamentals of how Windows operates at its core.

medium

60 min

33,168

User profile photo.

To access material, start machines and answer questions login.

Operating systems have a lot more technology and architecture behind them than we may see at first. In this room, we will be observing the Windows operating systems and common internal components.

Learning Objectives

  • Understand and interact with Windows processes and their underlying technologies.
  • Learn about core file formats and how they are used.
  • Interact with Windows internals and understand how the Windows kernel operates.

With Windows machines making up a majority of corporate infrastructure, red teams need to understand Windows internals and how they can be (ab)used. The red team can (ab)use Windows to aid in evasion and exploitation when crafting offensive tools or exploits.

Before beginning this room, familiarize yourself with basic Windows usage and functionality. Basic programming knowledge in C++ and is also recommended but not required.

We have provided a base Windows machine with the files needed to complete this room. You can access the machine in-browser or through using the credentials below.

Machine IP: MACHINE_IP             Username: THM-Attacker             Password: Tryhackme!

This is going to be a lot of information. Please buckle your seatbelts and locate your nearest fire extinguisher.

Answer the questions below

Start the provided machine and move on to the next tasks.

Ready to learn Cyber Security?

The Windows Internals room is only available for premium users. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.

Already have an account? Log in

We use cookies to ensure you get the best user experience. For more information see our cookie policy.