Hi, my latest utility ObjMon does realtime activity monitoring of kernel
objects. Not all but most of the standard kernel object types are supported.
Because many things on a system are kernel objects, the utility can be used
for a wide range of purposes.
It runs on most Windows versions including x64 editions but not on Vista.
The software uses some undocumented techniques and is therefore suitable for
research and educational purposes onl. I did pull the drivers through the
verifier however and so far it looks like it’s working but it will remain
vulnerable to OS changes.
If you like, check it out at http://www.resplendence.com/objmon
/Daniel