The book describes software kernel drivers programming for Windows. These drivers don't deal with hardware, but rather with the system itself: processes, threads, modules, Registry, and more. Kernel code can be used for monitoring important events, preventing some from occurring if needed. Various filters can be written that can intercept calls that a driver may be interested in.
The second edition expands on existing topics, and adds new topics, such as using the Windows Filtering Platform, and describing advanced programming techniques.
The book describes software kernel drivers programming for Windows. These drivers don't deal with hardware, but rather with the system itself: processes, threads, modules, Registry, and more. Kernel code can be used for monitoring important events, preventing some from occurring if needed. Various filters can be written that can intercept calls that a driver may be interested in.
The second edition expands on existing topics, and adds new topics, such as using the Windows Filtering Platform, and describing advanced programming techniques.
Paperback
$39.95