windows进程、线程、映像加载回调

注册进程回调的函数:PsSetCreateProcessNotifyRoutine或者PsSetCreateProcessNotifyRoutineEx
注册线程回调的函数:PsSetCreateThreadNotifyRoutine
注册映像的回调函数:PsSetLoadImageNotifyRoutine

你可能感兴趣的:(windows,windows)