Reverse Engineering Windows 10's ObRegisterCallbacks and ObUnRegisterCallbacks
Reverse engineering Windows 10's ObRegisterCallbacks and ObUnRegisterCallbacks, explaining how kernel drivers subscribe to object events, with the commands and code included.