通过PsSetCreateProcessNotifyRoutineEx实现对进程的监控，当进程创建或退出时，执行回调函数来实现对信息的收集
对「Windows Kernel Programing」一书上部分错误进行了修改，在Windows10 20H2下可用
-
Notifications
You must be signed in to change notification settings - Fork 1
AimiP02/SysMonitor
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
No description, website, or topics provided.
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published