Skip to content

I failed to register the callback on with PsSetCreateProcessNotifyRoutineEx #2

Description

@Tiantian930

Thanks for your work! I compiled and loaded your driver. While saw I failed at:
result = PsSetCreateProcessNotifyRoutineEx(PcreateProcessNotifyRoutineEx, FALSE);
The result is -1073741790 which means STATUS_INVALID_PARAMETER.
I signed the driver with test key as: 1.2.3.4
I doubt I might don't have the permission/privilege to register the callback function?
My OS is Windows 10.

I do appreciate if you can offer more information. Thanks.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions