I have a minifilter driver registered to the file system. It is loaded perfectly.
I wanted to attach the mini filter instance to all the volume in the system and also when new volume appears on the system.
For this I thought I can registered a callback function PFLT_INSTANCE_SETUP_CALLBACK during filter registration. And in the callback call I return success blindly.
My understanding is my mini filter driver should attach to all the volumes. But it doesn't attach. It attaches only if I give attach command from fltmc.
also flag filed as part of callback function should reflect the same data what I have given in registry..But I always get 5 in my case.
Am I doing something wrong or is there any additional stuffs that needs to done or checked?