I am using Kerio 4.2.2 (which has defaulted to its free status) and have been playing around with Rootkit Hook Analyser. When I run that it shows khips.sys running with 2 hooks. Does this mean that the HIPS function is actually working or is this part of the NIPS function?