Pinned

1. createprocessnotify-hook createprocessnotify-hook Public

   PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook

   C++ 5 3

2. Create process from KernelMode via APC Create process from KernelMode via APC

   1

   typedef struct _STARTUPINFOW {

   2

   	UINT32 cb;

   3

   	LPWSTR lpReserved;

   4

   	LPWSTR lpDesktop;

   5

   	LPWSTR lpTitle;