If you're into NT kernel internals, I recommend an excellent book "What Makes It Page?". It describes the VMM in way too much detail (in a good way).
It's a great combination of theory and practice - it describes concepts and then shows them on the live kernel. For example, the author introduces the concept of cache coloring and then he shows in WinDbg the actual variable on the process data structure where the color is stored.
It's a great combination of theory and practice - it describes concepts and then shows them on the live kernel. For example, the author introduces the concept of cache coloring and then he shows in WinDbg the actual variable on the process data structure where the color is stored.
http://www.amazon.com/What-Makes-It-Page-Windows/dp/14791142...