The operating system will also check certain parts of kernel code for integrity, and modifying these parts of code will cause a Blue Screen of Death. This last check is performed only on native AMD64 systems (but not on EM64T clones) The security measures applied in the new operating system which aim to protect the address space will make developing new rootkits very complicated, since many of them aim to modify the handler execution path (for instance, intercepting KeServiceDescriptorTable) and system structures.”]
Source: https://securelist.com/rootkits-and-windows-for-x86-64/30000/

