Windows NT event logging - Murray, James D. (O'Reilly, 1998)