Windows Basics - MartinDrab/IRPMon GitHub Wiki

The goal of this section is to provide you with information that allows you to understand how IRPMon works under the hood. The sections describes what driver and device objects are, and how one kernel component can communicate with another using documented means exposed by the Windows kernel.