hi all,

i'm currently learning all i can about the windows kernel (ntoskrnl.exe), hardware abstraction layer (hall.dll) and the windows subsystem (win32k.sys) in general.

Basically i'm trying to learn as much as i can about the internal structure of windows.

For this purpose i have read the book "Windows Internals 4" by Mark Russinovich and David Solomon, i'm reading the book "Undocumented Windows 2000 Secrets - The Programmers Cookbook" from Addison Wesley and i have a copy of the "Windows 2000 Native API reference".

You should say at first that enough info should be in these books but i still feel like i need more info. So if anyone can tell me what books / documents are interesting on the subject then that would be highly appreciated

Kind regards,

WS

Hiya,

I found this one very usefull:

MS Press - Inside Microsoft Windows 2000 - 3th Edition

However, i think the one you mentioned: "Addison Wesley - Undocumented Windows 2000 Secrets - A Programmer's Cookbook" is even better and goes in much more detail. I only have the intro (the cd that comes with it) where it is said that the book goes where "Inside Microsoft 2000" stops.

The "undocumented secrets" book is not for sale - at least not here in belgium nor on amazon. They dont print it anymore ... I've looked everywhere for it. So i gues in this case its ok to ask for the electronic version of it... if anyone is willing to send me this i would realy appreciate it

I also have these:

MS Press - Programming the Microsoft Windows Dirver Model
Processes Architecture - MS Lecture
Programming Windows 32-bit Kernel Ref
Remote Windows Kernel Exploitation
Undocumented Windows NT
Windows 2000 Native API

Greetz,

wiNGCom

I'm looking for those books as well for the summer holidays,
well found a couple but more to go..

Got these of the rootkit faq



hope u post any articles you find along the way

Windows internals 4 is the follow up on this book. It covers windows 2000, XP and 2003 server so buying an older book doesn't really work...

i've downloaded the pdf version of "Undocumented Windows 2000 Secrets - The Programmers Cookbook" by searching on filedonkey.com, then i downloaded emule to download the file since it is needed as a client.. Normally i would never do such a thing since i prefer reading a book on paper, but the book indeed is rare these days....

the pdf file is 42mb so it does take some time to download but at least it is available...

Anyone know if there is an updated version available for this book?

yamaraj > thanks for the titles, i'll go and find out if they are still available...