Hi, I have uploaded source code for the ObjMon kernel object activity
monitor driver if anyone is interested.
It’s a bit controversial, it hooks object type initializers functions
but it’s for education purposes only. As far as I know there is nothing
like it. I hope somebody can add something useful to this or get it to
work on Vista.
Anyway here it is:
http://www.resplendence.com/download/omSource.zip
Thanks,
//Daniel