Windows NT/2000 Native API Reference
ISBN: 1578701996
Buy on Amazon
Found in 1 comment on Hacker News
daurnimator · 2019-07-03 · Original thread
Was it "Windows NT/2000 Native API Reference" by Gary Nebbett? (https://amzn.to/2XHhSFF)

That's considered a bit of a bible for NT internals in security circles.

Fresh book recommendations delivered straight to your inbox every Thursday.