perfmon says that 'Kernel Current URIs Cached = 2 (average) and that 'Output Cache Current Items' = 3000-4000 (average) I think that this means that almost all of the objects are in the User Mode ...

I have planned to develop a windows security application to prevent malicious code attacks. The solution has user-mode application which will communicate with kernel mode driver for preprocessing ...

The operating system mode. Processors operate either in kernel mode or "user mode." Also called "supervisor mode," the kernel mode enables the OS (kernel) to execute "privileged instructions," which ...