by L. Spiro » Sun Dec 16, 2007 1:26 am
If the game does not appear in the All list then MHS can not attach to it anyway, so using window enumeration, if allowing to find windows otherwise not shown, would only tease you by letting you know the process is there but not allowing you to do anything with it.
In the future (and soon at that) there will be an secondary way to attach to processes without the need for acquiring a handle to it (which is currently why some processes fail to appear in the list (if any processes fail to appear in the list)).
As well, the kernel-mode driver will soon be spying on processes as they open and keeping track so that even if their EPROCESS link is removed they can still be seen in and opened from the list.
L. Spiro