The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
It's a great opportunity to join this excellent forum. This is my first attempt at writing a Kernel Driver. What I'm aiming to achieve is the creation of a small filter driver that captures all traffic from a serial port, such as IOCTL_SERIAL_GET_CHARS, to fully monitor the serial port's activities in stealth mode when another application is using it.
I came across this driver (https://www.codeproject.com/Articles/311159/SIMPLE-SERIAL-PORT-MONITOR) written in 2012, which I was able to compile, install, and run. Unfortunately, it's not very stable, but it serves as a good starting point.
It frequently crashes with a THREAD exception, and getting Windows back to normal operation after such crashes is quite challenging.
Once again, I must emphasize that this is my first experience with Kernel Drivers, and I'm struggling to set up a stable debugging configuration for testing.
Can anyone provide guidance on whether there's a clean way to create a simple driver for passive monitoring of serial port activity?
|Upcoming OSR Seminars
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!
|13-17 May 2024
|1-5 Apr 2024
|Internals & Software Drivers
|11-15 Mar 2024
|Writing WDF Drivers
|20-24 May 2024