驱动类 rootkit HOOK注册表读取-driven category rootkit HOOK read registry

Miss920程序行为监视器，运用SSDT HOOK技术，可以简单有效的监控程序行为，现在已经实现了进程监控，文件监控，注册表监控，并且可以有效快捷地进行二次开发。-Miss920 monitor program behavior, the use of SSDT HOOK technology, can be simple and effective monitoring of program behavior, the process has already been realized to

windows注册表监控源码。Ring0级中HOOKSSDT实现。-Windows registry monitoring source. The level Ring0 hook SSDT achieve.