2 ms·

Any resources you'd recommend?

• mrguyorama 9y ago
  The series of books known as "Windows System Internals"[0] Raymond Chen of "Old New Thing" fame and all his friends[1] The creator of process monitor occasionally writes nice blog posts about troubleshooting[2] A lot of historical NT stuff is still valid, or at least mildly relevant today. [0]https://www.amazon.com/Windows-Internals-Part-architecture-management/dp/0735684189/ref=sr_1_1?ie=UTF8&qid=1516387923&sr=8-1&keywords=windows+system+internals https://www.amazon.com/Windows-Internals-Part-architecture-m... [1]https://blogs.msdn.microsoft.com/oldnewthing/ https://blogs.msdn.microsoft.com/oldnewthing/ [2]https://blogs.technet.microsoft.com/markrussinovich/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far/ https://blogs.technet.microsoft.com/markrussinovich/2005/10/...