Detecting Kernel-Level Rootkits Using Data Structure Invariants
Gatekeeper: Monitoring Auto-Start Extensibility Points (ASEPs) for Spyware Management