5.4. OS and Software Problems

💡 First Principle: Software failures are harder to diagnose than hardware failures because they leave no physical evidence. The investigation is entirely log-based and behavioral. The key diagnostic skill is correlating the failure timeline with recent changes — patches, driver updates, configuration changes, and new software installations are the most common causes of software failures in stable environments.