j
k
j a
j l
It would be helpful to test PROCESS_VM_OPERATION and PROCESS_VM_WRITE separately to see if any of them is supposed to trigger PROCESS_QUERY_LIMITED_INFORMATION.
Back to the thread
Back to the list