The ALPC structs are undocumented but there are plenty of info to be found online about them.
Assuming that I am in the thread of a process that does an LPC call to a server, is there a way to find out the thread inside the server where this will land to from any of the ALPC data structs. So far, I have been able to find the process easily, as it is part of the context, but not the thread.
Thanks in advance
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Developing Minifilters||29 July 2019||OSR Seminar Space|
|Writing WDF Drivers||23 Sept 2019||OSR Seminar Space|
|Kernel Debugging||21 Oct 2019||OSR Seminar Space|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|