Code to show how to use new NtCreateProcessStateChange/NtCreateThreadStateChange syscalls - View it on GitHub