Hooking

what kind of hooking does comodo firewall / defense+ employ? if i understand correctly they use to make use of appinit? has this changed or is there a new method with v3x?

bump please,

someone must know, this is the comodo forums after all.