Windows Kernel Programming
暫譯: Windows 核心程式設計

There is nothing like the power of the kernel in Windows - but how do you write kernel drivers to take advantage of that power? This book will show you how.
The book describes software kernel drivers programming for Windows. These drivers don't deal with hardware, but rather with the system itself: processes, threads, modules, Registry, and more. Kernel code can be used for monitoring important events, preventing some from occurring if needed. Various filters can be written that can intercept calls that a driver may be interested in.
The second edition expands on existing topics, and adds new topics, such as using the Windows Filtering Platform, and describing advanced programming techniques.