The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
Dear fellow developers,
Over the past months, I have written a minifilter which registers some IRP and some system hooks such as PsSetCreateProcessNotifyRoutine_and _ObCallbacks. I would like to evaluate/benchmark the potential loss of time that the driver may have introduced one installed on a system (due to the synchronous code executed, maybe bad coding practices, etc.). Is there a standard approach to evaluate the performance of a minifilter ? My intuitive idea was to perform a lot of file system interactions (e.g., opening/reading/writing/closing files) and processes interactions with and without the driver and compare the results, but I'm not sure if the signal-to-noise ratio would be meaningful enough.
Any thoughts ?
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!||Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||15 Jun 2020||LIVE ONLINE|
|Writing WDF Drivers||22 June 2020||LIVE ONLINE|
|Internals & Software Drivers||28 Sept 2020||Dulles, VA|