It's a pretty great extension for analysis and reversing, and I've used it quite a bit when looking at lots of different kernel-level malware. I didn't see it posted on here so I thought I'd go ahead and post it. I've contributed to its documentation before in the past, so it's pretty neat seeing it go open-source.
https://github.com/msuiche/SwishDbgExt
Enjoy.
https://github.com/msuiche/SwishDbgExt
Enjoy.
"This Regin driver recurrently checks that the current IRQL is set to PASSIVE_LEVEL using the KeGetCurrentIrql() function in many parts of the code, probably in order to operate as silently as possible"
