Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

Original file type using the file signature in kernal mode file system driver

Nikhil_V_SNikhil_V_S Member - All Emails Posts: 52

Hi,

I have a legacy file system driver i am trying to find the Original file type using the file signature (Magic number).

Is it possible to read the file signature in kernal mode ?

Can I use fopen and fread in kernal mode file system driver.

Can you provide any solutions

Thanks in advance

Comments

  • Mauro_LeggieriMauro_Leggieri Member Posts: 68

    You have all kind of file I/O functions on kernel starting from ZwCreateFile and FltCreateFile.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Developing Minifilters 29 July 2019 OSR Seminar Space
Writing WDF Drivers 23 Sept 2019 OSR Seminar Space
Kernel Debugging 21 Oct 2019 OSR Seminar Space
Internals & Software Drivers 18 Nov 2019 Dulles, VA