Here is another case study involving multiple patterns (most of them were published in the previous volumes): Incomplete Session, ALPC and Critical Section Wait Chains, Blocked Thread, and Dialog Box.
It was reported that a user couldn't start a session. A complete memory dump was generated and we found 3 sessions there. Looking at the last one we found it incomplete (page 150) with only 3 processes (a normal running user session after initialization was expected to have more than 3 processes):
0: kd> !session Sessions on machine: 3 Valid Sessions: 0 1 2
0: kd> !sprocess 2 Dumping Session 2
_MM_SESSION_SPACE fffffa600a3e1000 _MMSESSION fffffa600a3e1b40 PROCESS fffffa8007f6c040 SessionId: 2 Cid: 242c Peb: 7fffffd8000 ParentCid: ...