Professional Rootkits

Ric takes a conversational tone, making for easy reading. The code in the book is very well-written, not just throwaway crap code like in other books. I really like his real-world example of sniffing someone's PGP passphrase, keeping the book real, focused, and practically applicable. There are other books in this space by bigger names, but this is the one I recommend to people who want to get started developing in this space, developing good programming habits, and have moved beyond reading the source code for FileMon. Highly recommended for folks developing projects or doing contracts in the area of Information Offensive government work, whatever government that might be.