Introduction - If you have any usage issues, please Google them yourself
Kernel-level process monitoring source, 1. Can monitor the process by specifying the form name to prohibit the operation of the specified process. 2. Can be real-time monitoring of the machines which process is the creation, operation procedures and so on through the mount SSDT realize