Minifilter attach to locked volume?

Hey guys, I’m tinkering with the minispy sample app from MS.

If I have a locked volume, I am unable to attach to it. But, running Procmon, or filespy, I can see AVG & MS Security Essentials attaching to it, and checking files on it.

What gives? What am I missing?

-Frank

You are not able to attach to it is not enough information.
What is the error you are getting ?
Are you not notified for instance setup ?
You have to give us a little more to go on.

Gabriel.
www.kasardia.com

On Mon, Feb 6, 2017 at 7:57 AM, wrote:

> Hey guys, I’m tinkering with the minispy sample app from MS.
>
> If I have a locked volume, I am unable to attach to it. But, running
> Procmon, or filespy, I can see AVG & MS Security Essentials attaching to
> it, and checking files on it.
>
> What gives? What am I missing?
>
> -Frank
>
> —
> NTFSD is sponsored by OSR
>
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> software drivers!
> Details at http:
>
> To unsubscribe, visit the List Server section of OSR Online at <
> http://www.osronline.com/page.cfm?name=ListServer&gt;
>


Bercea. G.</http:>