Exploring malicious Windows drivers (Part 2): the I/O system, IRPs, stack locations, IOCTLs and more

https://blog.talosintelligence.com/exploring-malicious-windows-drivers-part-2/