There is no need to use image notification callbacks, if you want to get the driver object of another driver you can use ObReferenceObjectByName, or you can ObOpenObject then ObReferenceObjectByHandle.
PLOAD_IMAGE_NOTIFY_ROUTINE can be used to help in get the driver image in kernel mode to hook the driver then?
There is no need to use image notification callbacks, if you want to get the driver object of another driver you can use ObReferenceObjectByName, or you can ObOpenObject then ObReferenceObjectByHandle.