Direct Kernel Object Manipulation (DKOM) attacks on ETW Providers - KnifeCoat

https://knifecoat.com/Posts/Direct+Kernel+Object+Manipulation+(DKOM)+attacks+on+ETW+Providers