The NtAllocateVirtualMemory hook can be unnecessarily noisy particularly when analyzing URLs with IE, so restrict its logging to interesting allocations: those allowing execute or involving other processes.  Likewise, restrict the logging of NtFreeVirtualMemory to only involve freeing memory of other processes.