windows internals
Windows Internals You Need To Know Before Kernel Exploitation
Every defense mechanism between a user-mode process and kernel code execution, explained from first principles — PatchGuard, VBS, HVCI, SMEP, SMAP, CET, KASLR, and the rest.