CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers. - View it on GitHub