Hello,
I am writing a driver that will detect app launches using a function such
as PsSetLoadImageNotifyRoutine. I have a user mode app which decides if
the process should be allowed to run or not.
Is it possible to actually terminate the execution of the detected app
once my callback function has been called? If this is the wrong approach,
could someone please give me a hint at the correct way of doing this.
Thanks in advance,
Dave.