I've recently jumped into the world of Windows driver development, and have had some reasonable success in hiding processes and modules by manipulating the Flink and Blink parameters of kernel objects such as EPROCESS.
What I'd now like to take a look at is NtQueryVirtualMemory in relation to driver memory (not the memory of usermode processes), but can't really find any definitive resources on the subject. Essentially I want to implement a simple checksum over the .text and .init sections of my driver.
Can anyone point me to a decent reference for using NTQVM to query driver memory?
P.S: Sorry, had a load of tabs up and accidently posted this in the wrong section. Could a mod kindly shift it over to the programming section?