Deferred Procedure Calls — DPCs : A Real Deep Dive Internals, WinDbg, and Exploitation (opens in new tab)
IRQLs → KDPC internals → WinDbg live analysis → vulnerable driver code → ROP-based exploitation → BYOVD → mitigations breakdown
Read the original article