Is there a way to monitor and block sharing of a folder? For example if I'd like to protect "c:\test" folder I'd like to deny all access to files within it.
But if someone shares this folder:
net share mytest=c:\test /GRANT:Everyone,FULL
The folder would be accessible through network share circumventing the regular minifilter protection (blocking access to folder based on disposition in PreCreate)
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars||Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||20 Apr 2020||OSR Seminar Space & ONLINE|
|Writing WDF Drivers||11 May 2020||OSR Seminar Space & ONLINE|
|Internals & Software Drivers||28 Sept 2020||Dulles, VA|