Ring0中HOOK SSDT实现注册表监控 ..............................\HideProcess.sys ..............................\makefile ..............................\RegisterProtect.c ..............................\sources