@catmanjan yes you can, however it is not a great approach for non-targeted interception. I.e for system wide I would do a filter driver.
@TinkerWorX it allows you to control which threads will be intercepted. A thread Id of zero will be replaced with CurrentThreadId. Inclusive means only intercept the provided thread ids, exclusive means all except the provided ids.