title: Hooking OpenProcess() or ReadVirtualMemory() in win32 userland code
body: <p>Is there anyway to hook/detour either of <code>OpenProcess()</code> or <code>ReadProcessMemory()</code> function calls to my own custom functions?</p>
  
  <p>Without:</p>
  
  <ol>
  <li>kernel driver on Zw/NtOpenProcess, requires rootkit exploit or
  driver signing for deployment</li>
  <li>injecting .dll's in every process, spammy waste of resources and
  alerts many antivirus</li>
  </ol>
  
  <p>I am trying to prevent other processes from getting a <code>HANDLE</code> or reading the memory of a vector of PIDs.</p>