@ -98,6 +98,8 @@ pml4e at -> 272 (0x0000000127957880)
// ...
```
### Simple Page Table Checks
You can simply call `NtQuerySystemInformation` - `SystemProcessInformation` and enumorate all running processes (BattlEye already does this) to obtain each processes PID.
```cpp
@ -133,12 +135,20 @@ This is a simple example of checking for kernel memory in usermode...
```cpp
// for loop enumorating over SYSTEM_PROCESS_INFORMATION results...