I tried to determine the read and write in pre create to decide whether to perform a simple redirect. If it is a read operation, I will not make any changes, otherwise I will simply redirect it using simrep.
I know that there is a variable whose name is like satisfying this need.
But it doesn't seem to work
In addition, in a post in 2005, it was said that Create cannot determine whether it is a read or write operation, and can only judge whether it is opened or created. for reference only.
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|Writing WDF Drivers||21 Oct 2019||OSR Seminar Space & ONLINE|
|Internals & Software Drivers||18 Nov 2019||Dulles, VA|
|Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||27 Apr 2020||OSR Seminar Space & ONLINE|