Ring0中HOOK SSDT实现注册表监控\Hide Process.sys ..............................\makefile ..............................\RegisterProtect.c ..............................\sources Ring0中HOOK SSDT实现注册表监控