1.2.2 Informative References

[MSDN-BNDHNDLS] Microsoft Corporation, "Binding Handles", http://msdn.microsoft.com/en-us/library/aa373566.aspx

[MSDN-CH] Microsoft Corporation, "Context Handles", http://msdn.microsoft.com/en-us/library/aa373605(VS.85).aspx

[MSDN-CONSUMEVTS] Microsoft Corporation, "Consuming Events", http://msdn.microsoft.com/en-us/library/dd996910.aspx

[MSDN-CreateFile] Microsoft Corporation, "CreateFile function", http://msdn.microsoft.com/en-us/library/aa363858(VS.85).aspx

[MSDN-EVENTRECORD] Microsoft Corporation, "EVENT_RECORD structure", http://msdn.microsoft.com/en-us/library/aa363769(VS.85).aspx

[MSDN-EVENTS] Microsoft Corporation, "Event Schema", http://msdn.microsoft.com/en-us/library/aa385201.aspx

[MSDN-EVENT] Microsoft Corporation, "Event Logging", http://msdn.microsoft.com/en-us/library/aa363652.aspx

[MSDN-EVENT_DESCRIPTOR] Microsoft Corporation, "EVENT_DESCRIPTOR structure", http://msdn.microsoft.com/en-us/library/aa363754(VS.85).aspx

[MSDN-EVENT_HEADER] Microsoft Corporation, "EVENT_HEADER structure", http://msdn.microsoft.com/en-us/library/aa363759(v=VS.85).aspx

[MSDN-EvntManifestSE] Microsoft Corporation, "EventManifest Schema Elements", http://msdn.microsoft.com/en-us/library/aa382753(v=VS.85).aspx

[MSDN-EVTLGCHWINEVTLG] Microsoft Corporation, "Event Logs and Channels in Windows Event Log", http://msdn.microsoft.com/en-us/library/aa385225.aspx

[MSDN-EVTSCT] Microsoft Corporation, "Event Schema Complex Types", http://msdn.microsoft.com/en-us/library/aa384343(v=VS.85).aspx

[MSDN-EVTSST] Microsoft Corporation, "Event Schema Simple Types", http://msdn.microsoft.com/en-us/library/aa385204(v=VS.85).aspx

[MSDN-FILEATT] Microsoft Corporation, "GetFileAttributes function", http://msdn.microsoft.com/en-us/library/aa364944.aspx

[MSDN-FMT] Microsoft Corporation, "FormatMessage function", http://msdn.microsoft.com/en-us/library/ms679351.aspx

[MSDN-GETTHDPREUILANG] Microsoft Corporation, "GetThreadPreferredUILanguages function", http://msdn.microsoft.com/en-us/library/dd318128(v=vs.85).aspx

[MSDN-MUIResrcMgmt] Microsoft Corporation, "MUI Resource Management", http://msdn.microsoft.com/en-us/library/dd319070(VS.85).aspx

[MSDN-ProcessTrace] Microsoft Corporation, "ProcessTrace function", http://msdn.microsoft.com/en-us/library/aa364093.aspx

[MSDN-ProvEvts] Microsoft Corporation, "Providing Events", http://msdn.microsoft.com/en-us/library/aa364098(v=VS.85).aspx

[MSDN-RpcAsyncCompleteCall] Microsoft Corporation, "RpcAsyncCompleteCall function", http://msdn.microsoft.com/en-us/library/aa375572(v=VS.85).aspx

[MSDN-stringTable] Microsoft Corporation, "stringTable (LocalizationType) Element", http://msdn.microsoft.com/en-us/library/aa384125(v=VS.85).aspx

[MSDN-WAIM] Microsoft Corporation, "Writing an Instrumentation Manifest", http://msdn.microsoft.com/en-us/library/dd996930.aspx

[MSDN-WPPST] Microsoft Corporation, "WPP Software Tracing", http://msdn.microsoft.com/en-us/library/ff556204.aspx

[MSFT-CVE-2021-31958] Microsoft Corporation, "Windows NTLM Elevation of Privilege Vulnerability", CVE-2021-31958, June 8, 2021, https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31958

[MSKB-113996] Microsoft Corporation, "INFO: Mapping NT Status Error Codes to Win32 Error Codes", March 2005, http://support.microsoft.com/kb/113996

[PE-COFF] Microsoft Corporation, "Microsoft Portable Executable and Common Object File Format Specification", May2006, https://github.com/tpn/pdfs/blob/master/Microsoft%20Portable%20Executable%20and%20Common%20Object%20File%20Format%20Specification%20-%201999%20(pecoff).pdf