The ALPC structs are undocumented but there are plenty of info to be found online about them.
Assuming that I am in the thread of a process that does an LPC call to a server, is there a way to find out the thread inside the server where this will land to from any of the ALPC data structs. So far, I have been able to find the process easily, as it is part of the context, but not the thread.
Thanks in advance
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Writing WDF Drivers||21 Oct 2019||OSR Seminar Space & ONLINE|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|
|Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||27 Apr 2020||OSR Seminar Space & ONLINE|