NTSTATUS PsSetCreateThreadNotifyRoutine( __in PCREATE_THREAD_NOTIFY_ROUTINE NotifyRoutine ); Routine Description: This function allows an installable file system to hook into thread creation and deletion to track those events against their own internal data structures. Arguments: NotifyRoutine - Supplies the address of the routine which is called at thread creation and deletion. The routine is passed the unique Id of the created or deleted thread and the unique Id of the containing process. The third parameter passed to the notify routine is TRUE if the thread is being created and FALSE if it is being deleted. Return Value: STATUS_SUCCESS if successful, and STATUS_INSUFFICIENT_RESOURCES if not.