I implemented a mini-filter with hooks on IRP_MJ_CREATE pre and post. From a user space app, I'm calling CreateFile for reparse point file with the flag FILE_FLAG_OPEN_REPARSE_POINT. Should I get a hook for that and catch it on pre/post create as I don't seem to get it?
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Developing Minifilters||29 July 2019||OSR Seminar Space|
|Writing WDF Drivers||23 Sept 2019||OSR Seminar Space|
|Kernel Debugging||21 Oct 2019||OSR Seminar Space|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|