Microsoft Windows Internals (4th Edition): Microsoft Windows Server 2003, Windows XP, and Windows 2000
Mark E. Russinovich is a Technical Fellow in the Windows Azure™ group at Microsoft. He is coauthor of the Windows Internals book series, lead author forWindows Sysinternals Administrator’s Reference, cofounder of the Sysinternals web site, and a highly regarded expert on Windows internals and computer security.