[R00tKit]

i change this topic to "Good article about win32 - kernel " in goal of sharering good article ( link to good post in blogs and forums )

http://blog.airesoft.co.uk/apichanges/2k8sp1-win7rc.xml

[R00tKit]

process thread creation notification the easy way
http://blog.airesoft.co.uk/2012/05/proc ... -easy-way/