Michael Grube’s Reviews > Designing BSD Rootkits: An Introduction to Kernel Hacking > Status Update

Pretty solid, teaches the fundamentals of rootkits without focusing too much on implementation for BSD, though the details are there if you want it.