Inside the Disk Key
The HKLM\System\Disk\Information value is the heart of Windows NT's disk administration. It contains information on drive mappings and fault tolerant configurations. In this article I go inside the Disk\Information value to describe its format.
Monitoring Boot-time Registry Access
Regmon for Windows NT Version 3.7 lets you monitor and record Registry activity from very early in a system boot. Learn about Windows by examining the Registry activity of an entire boot-to-boot life cycle!
Sysinternals at Microsoft
Sysinternals tools are used heavily by Microsoft developers and support personnel. They are referenced in over two dozen Microsoft Knowledge Base articles and this page serves as a list of the ones we know of.
The Sysinternals newsletter archives provide miscellaneous tips and information on Windows internals.