PLOAD_IMAGE_NOTIFY_ROUTINE Callback
PLOAD_IMAGE_NOTIFY_ROUTINE can be used to help in get the driver image in kernel mode to hook the driver then?
There is no need to use image notification callbacks, if you want to get the driver object of another driver you can use ObReferenceObjectByName, or you can ObOpenObject then ObReferenceObjectByHandle.
Ineresting.... Subcribed)