A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #30642  by Cuidightheach
 Wed Jul 26, 2017 11:56 am
Can you recommend any good book or tutorial series about software driver development (not about device driver development)?
I'm not trying to be a professional driver developer, but due to driver capabilities is commonly used by malware I want to know how they work.
 #30643  by Vrtule
 Wed Jul 26, 2017 12:26 pm
Sometimes, an article related "software" driver development is released in the NT Insider magazine (made by OSR Online). OSR mailing lists are also a good source related to driver development (including software-only drivers).

If you are interested only in the software aspect (even not in virtual devices), you should mainly focus on file system minifilter drivers, registry filter drivers, the Windows Filtering Platform interface, OB filtering model, and possibly also the NDIS filter drivers. Truth be told, I don't know about any sufficiently new book about these topics. I use mostly the official documentation as an information source.