All topics

The best Windows Internals newsletters

2 newsletters, ranked by editorial quality and how recently they published. Looking for something more specific? Search instead.

rastamouse.me· irregular· Published 3 months ago

A security researcher's blog-style newsletter about Crystal Palace, a link-time COFF/PICO merging toolchain, covering COFF mixing to avoid memory-injected call stack artifacts, user-defined intrinsics, and lessons from building Crystal Kit's IAT hooks. Readers get deep technical walkthroughs of offensive tradecraft internals with code and spec file examples.

crystal palacecoffpicoposition independent codeintrinsicsiat hooking
gtworek.com· irregular· Inactive for over a year

Technical deep dives into Windows security internals, covering file locking, VSS snapshots, impersonation APIs and pending file operations. Readers get hands-on explanations of how Windows mechanisms work and how attackers and researchers interact with them.

windows internalswindows securityvssshadow copiescreateprocesswithlogonwimpersonation