How do I tell whether a Windows kernel Event object is auto-reset or manual-reset?...

How to use MAXIMUM_ALLOWED properly?...

FsRtlIsNameInExpression never matches anything...

Hook ZwDeviceIoControlFile with patchguard enabled on Win 10 x64...

After modifying msr[lstar], why the expected breakpoint cannot be hit?...

Unresolved external symbols in <wsk.h> while building...

How Windows Handle to associate corresponding object type?...

How can I see API calls for specific processes in the Windows kernel driver?...

Memory Access Control in Windows Memory Management...

How investigate disk cache usage in Win32 application?...

Suspending a NDIS LWF...

x86 - Does Windows map dlls to the same physcal page in different processes?...

WinUI3 MONZA::DdiThreadingContext Exception while drag and drop...

Mouse filter driver gets IRP_MJ_CLOSE after starting...

driver handling \Device\...

RegistryCallback and RegCreateKeyEx...

How to share kernel objects, such as Waitable Timers, between processes?...

InitializeSecurityContextW returns SEC_E_INVALID_HANDLE after second call...

Is it relevant for CreateFile whether other handles to the same file have been opened by the same or...

Thread Environment block and Process Environment block...

Can we monitor windows network information in realtime using minifilters?...

How can I start making kernel Windows drivers?...

Removing the desired access from the pre operation routine in kernel mode, leaves the process in ete...

Unable to get all hard disks information with kernel mode driver on windows 11...

How to allocate heap in kernel space for an array of fix-sized arrays of characters?...

Trouble passing a C# string from userland to kernelmode C and using it to find specific LDR_DATA_TAB...

Windows Hostname (NetBIOS) in windows 10 kernel driver?...

What is the purpose of IoCompleteRequest?...

Why should kernel drivers reside in non-paged memory?...

Device driver does not install on any devices, use primitive driver if this is intended in Visual st...