Is there a way to monitor and block sharing of a folder? For example if I'd like to protect "c:\test" folder I'd like to deny all access to files within it.
But if someone shares this folder:
net share mytest=c:\test /GRANT:Everyone,FULL
The folder would be accessible through network share circumventing the regular minifilter protection (blocking access to folder based on disposition in PreCreate)
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Developing Minifilters||29 July 2019||OSR Seminar Space|
|Writing WDF Drivers||23 Sept 2019||OSR Seminar Space|
|Kernel Debugging||21 Oct 2019||OSR Seminar Space|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|