Back

Grzegorz Tworek - ex-MVP^18

Ghost
gtworek.com· irregular· Inactive for over a year

Technical deep dives into Windows security internals, covering file locking, VSS snapshots, impersonation APIs and pending file operations. Readers get hands-on explanations of how Windows mechanisms work and how attackers and researchers interact with them.

windows internalswindows securityvssshadow copiescreateprocesswithlogonwimpersonationfile lockingmovefileexregistrysam fileedrdebugging
Platform
Ghost
Frequency
Irregular
Latest issue
Aug 10, 2025
Language
English
Written for
Windows security researchers, sysadmins and red/blue team practitioners
Tone
practical
Tracked since
Oct 23, 2026

Website: https://www.gtworek.com/