Use PsSetCreateProcessNotifyRoutineEx \ PsSetLoadImageNotifyRoutine
to monitor Process Create or destruction.
MiniVT on windows XP、windows7 x86+x64.
from https://bbs.pediy.com/thread-211973.htm
HideDriver by MiProcessLoaderEntry. support win7 win8 win10
from @zhuhuibeishadiao https://github.com/ZhuHuiBeiShaDiao/NewHideDriverEx
Catch your keyboard operation.
If you want to add a license to your driver,you can use LockTimeCheck set deadline and confirm whether it expires.