Hi, I have a disk filter driver (This is a lower filter driver for disk.sys and without any other filter drivers in the system sits about storahci.sys or other Storport drivers).
The disk filter driver implements IRP_MJ_SCSI and also IOCTL_SCSI_PASS_THROUGH_DIRECT and IOCTL_SCSI_PASS_THROUGH_DIRECT_EX in the IRP_MJ_DEVICE_CONTROL.
Even with these, on certain systems, my filter driver is not seeing all requests. Or at least I think I am missing some requests.
For example, if I put a breakpoint on the underlying Storport's read/write routines, those breakpoints hit and my driver is not on the call stack.
This is Windows 10 1903 if it matters.
How do I guarantee that all disk accesses are routed through my filter driver?. i though implementing IRP_MJ_SCSI and the above were enough.
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars||Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||20 Apr 2020||OSR Seminar Space & ONLINE|
|Writing WDF Drivers||11 May 2020||OSR Seminar Space & ONLINE|
|Internals & Software Drivers||28 Sept 2020||Dulles, VA|