PLOAD_IMAGE_NOTIFY_ROUTINE Callback
PLOAD_IMAGE_NOTIFY_ROUTINE can be used to help in get the driver image in kernel mode to hook the driver then?
PLOAD_IMAGE_NOTIFY_ROUTINE Callback
There is no need to use image notification callbacks, if you want to get the driver object of another driver you can use ObReferenceObjectByName, or you can ObOpenObject then ObReferenceObjectByHandle.
Ineresting.... Subcribed)
