I think there’s no way around this: https://docs.microsoft.com/en-us/sysinternals/learn/windows-internals