Mark E. Russinovich is the former chief software architect and cofounder of Winternals Software, a company that specialized in advanced systems software for Windows. He authored the Sysinternals tools featured in this book. Winternals and its Sysinternals tools were acquired by Microsoft in 2006. Mark is now a Technical Fellow at Microsoft. Mark has a Ph.D. in computer engineer...(展开全部)

Mark E. Russinovich is the former chief software architect and cofounder of Winternals Software, a company that specialized in advanced systems software for Windows. He authored the Sysinternals tools featured in this book. Winternals and its Sysinternals tools were acquired by Microsoft in 2006. Mark is now a Technical Fellow at Microsoft. Mark has a Ph.D. in computer engineer...(展开全部)

The First In-Depth, Real-World, Insider’s Guide to Powerful Windows Debugging For Windows developers, few tasks are more challenging than debugging—-or more crucial. Reliable and realistic information about Windows debugging has always been scarce. Now, with over 15 years of experience two of Microsoft’s system-level developers present a thorough and practical guide to Windows ...(展开全部)

This book targets forensic analysts and professionals who would like to develop skills in digital forensic analysis for the Windows platform. You will acquire proficiency, knowledge, and core skills to undertake forensic analysis of digital data.Prior experience of information security and forensic analysis would be helpful. You will gain knowledge and an understanding of performing forensic analysis with tools especially built for the Windows platform.

本书主要讲解Windows高级调试思想和工具，并涉及一些高级调试主题。本书内容主要包括：工具简介、调试器简介、调试器揭密、符号文件与源文件的管理、栈内存破坏、堆内存破坏、安全、进程间通信、资源泄漏、同步、编写定制的调试扩展、64位调试、事后调试、Windows Vista基础以及应用程序验证器的测试设置等。本书内容详实、条理清楚。 本书适合Windows开发人员、Windows测试人员和Windows技术支持人员等参考。

Although Microsoft Windows NT is one of the most popular operating systems in the corporate world, no book has documented what actually goes on under the hood -- until now. Undocumented Windows NT dissects the Win32 interface, deconstructs the underlying APIs, and deciphers the Memory Management architecture to help you understand operations, fix flaws, and enhance performance....(展开全部)

本书前身是《Windows内核安全与驱动开发》，重点围绕Windows操作系统的机制介绍内核安全编程技术，除了少数特殊章节，大部分内容均适用于Windows 2000至Windows 10操作系统，体系结构覆盖32位以及64位。同时本书也深入浅出地介绍了汇编基础和系统内核机制。本书共分为三篇，分别从不同的角度介绍内核编程技术。第1篇面向零基础的读者，其中“内核编程环境”“内核驱动运行与调试”“内核编程基础”重点介绍与内核编程相关的基本知识、开发环境搭建，以及基本的编程机制。“应用与内核通信”和“64位和32位内核开发差异”主要介绍应用层编程与内核编程的数据交互。*后，介绍了编程过程所需注意的事项，以及设计技巧。第2篇结合操作系统的机制，从*简单的“串口的过滤”开始，介绍了“键盘的过滤”‘“磁盘的过滤”“文件系统的过滤”“Windows过滤平台”“ND...(展开全部)

在线阅读本书 Delve inside the Windows kernel with noted internals experts Mark Russinovich and David Solomon, in collaboration with the Microsoft Windows product development team. This classic guidefully updated for Windows Server 2003, Windows XP, and Windows 2000, including 64-bit extensionsdescribes the architecture and internals of the Windows operating system. Youll find hand...(展开全部)

本书详细介绍Windows图形系统，包括Win32 GDI和 DirectDraw API的技术细节：设备环境、坐标空间和变换、像素、填充区域、位图、图像处理、文字处理、元文件、打印处理等。本书内容翔实、例子丰富、分析透彻，是Windows编程人员的实用参考书。附带光盘包含书中实例、实用程序、相关信息等。

在Windows系统中没有什么比内核更强大了，但是如何编写内核驱动程序来利用这种强大能力呢？这本书为读者描述如何编写Windows系统的软件内核驱动程序。这些驱动程序不涉及硬件，而是处理系统本身：进程、线程、模块、注册表等等。内核代码可用于监视重要事件，防止在需要时发生某些事件。读者可以通过编写各种过滤器来拦截驱动程序中感兴趣的调用。