Under the Hood - MartinDrab/IRPMon GitHub Wiki

This section describes how IRPMon (especially its driver part) works internally. To understand topics described here, you need to know about concepts and mechanisms described in the Windows Basics section.

• Hook Records.
• Request Monitoring.
• Monitoring Non-existent PnP Drivers.
• Special Requests.