Is there anyway to hook external process?

[wtfbbq]

inside ia32::cr3_t kernel_cr3
auto kprocess = reinterpret_cast<NT_KPROCESS*>(PsGetCurrentProcess());

I've found that if I KeStackAttachProcess to external process, therefore PsGetcurrentProcess returns external process

In this way it can hook external process, but it bsod sometime (when unloading driver etc..)

How can I hook external process?

[trash-code]

The hypervisor has nothing to do with hooking, and frankly you shouldn't even be looking at a hypervisor if you have issues hooking.