Windows Kernel Programming（第2版）[英文PDF]

McSafe

内容简介

There is nothing like the power of the kernel in Windows - but how do you write kernel drivers to take advantage of that power? This book will show you how.
The book describes software kernel drivers programming for Windows. These drivers don't deal with hardware, but rather with the system itself: processes, threads, modules, Registry, and more. Kernel code can be used for monitoring important events, preventing some from occurring if needed. Various filters can be written that can intercept calls that a driver may be interested in.
The second edition expands on existing topics, and adds new topics, such as using the Windows Filtering Platform, and describing advanced programming techniques.

    在 Windows 系统中，没有什么能比内核的力量更强大了——但该如何编写内核驱动程序来充分利用这种强大功能呢？这本书将为你揭晓答案。
    本书介绍了 Windows 系统软件内核驱动程序的编程方法。这些驱动程序并不处理硬件，而是与系统本身打交道：包括进程、线程、模块、注册表等。内核代码可用于监控重要事件，并在必要时阻止某些事件的发生。还可以编写各种过滤器，拦截驱动程序可能感兴趣的调用。
    第二版在现有主题的基础上进行了拓展，并增添了新的主题，例如使用 Windows 过滤平台，以及介绍高级编程技术。