I am developing a basic file system minifilter. I have two questions
1) How to detect if a new file created was manually created (by right clicking the mouse and creating) or programmatically created (using CreateFile()).
2) Once a file is created there are lots of IRP_MJ_CREATE requests raised (about 4-5) what is the concept behind what do they signify?
It looks like you're new here. If you want to get involved, click one of these buttons!
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!||Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||20 Apr 2020||LIVE ONLINE|
|Writing WDF Drivers||11 May 2020||LIVE ONLINE|
|Internals & Software Drivers||28 Sept 2020||Dulles, VA|