Press Play To Restart - Under the Hood of the Windows Restart Manager

This talk explains the Windows Restart Manager’s architecture and how it handles locked files during software updates. It demonstrates legitimate and malicious uses of the component and methods processes can use to defend against its abuse.