A forum for reverse engineering, OS internals and malware analysis 

Forum for discussion about user-mode development.
 #33239  by DarkC0de
 Mon Oct 28, 2019 12:31 pm
Hi everyone .

I am looking for a sign driver that can provide me with a call to PsSetCreateProcessNotifyRoutineEx.
I am working on a project to monitor the CreateProcess function, to trace any new process without using ETW.


Thanks.