Thanks for your work! I compiled and loaded your driver. While saw I failed at:
result = PsSetCreateProcessNotifyRoutineEx(PcreateProcessNotifyRoutineEx, FALSE);
The result is -1073741790 which means STATUS_INVALID_PARAMETER.
I signed the driver with test key as: 1.2.3.4
I doubt I might don't have the permission/privilege to register the callback function?
My OS is Windows 10.
I do appreciate if you can offer more information. Thanks.
Thanks for your work! I compiled and loaded your driver. While saw I failed at:
result = PsSetCreateProcessNotifyRoutineEx(PcreateProcessNotifyRoutineEx, FALSE);The result is -1073741790 which means STATUS_INVALID_PARAMETER.
I signed the driver with test key as: 1.2.3.4
I doubt I might don't have the permission/privilege to register the callback function?
My OS is Windows 10.
I do appreciate if you can offer more information. Thanks.