Grzegorz Tworek - ex-MVP^18
GhostTechnical deep dives into Windows security internals, covering file locking, VSS snapshots, impersonation APIs and pending file operations. Readers get hands-on explanations of how Windows mechanisms work and how attackers and researchers interact with them.