Archive for October, 2007

2

Process vigilance via PsSetCreateProcessNotifyRoutineEx

Posted by Satya Das
October 9, 2007

PsSetCreateProcessNotifyRoutineEx is the newest kid in block if you wish to keep a watch on process creation or destruction in your driver. It is available in Vista SP1 onwards. You would need to use 2008 WDK (6001 onwards) to build your driver and