3 repositories on SrcLog
Research on Windows Kernel Executive Callback Objects
Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
BONOMEN - Hunt for Malware Critical Process Impersonation