1.Enum Process By PsLookupProcessByProcessId/travel Active List/PspCidTable
2.Hdie Process By Process Active List/PspCidTable
3.Monitor Process CreateInformation By PsSetCreateProcessNotifyRoutineEx
