Windows驱动笔记
PsSetCreateProcessNotifyRoutineEx报错STATUS_ACCESS_DENIED-0xC0000022
2024-12-02
1
0
PsSetCreateProcessNotifyRoutineEx调用时报错误STATUS_ACCESS_DENIED，文档给的解释是:The image that contains the callback routine pointer did not have IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY set in its image header.
解释就是：PsSetCreateProcessNotifyRoutineEx使用的回调函数所在的PE文件中必须有IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY标识。
这个我们直接在VS链接命令行中指定就行了
/integritycheck
