CREATE_PROCESS in VXD

NTDEV
1

I have added a macro for CREATE_PROCESS notification using
#define ON_CREATE_PROCESS(f) case CREATE_PROCESS: \
f(r_edx); \
break;

#define ON_DESTROY_PROCESS(f) case DESTROY_PROCESS: \
f(r_edx); \
break;

Now whenevr new process create BLUE Screen comes… can I use CREATE_PROCESS
as above ???