The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
Hi, I have a disk filter driver (This is a lower filter driver for disk.sys and without any other filter drivers in the system sits about storahci.sys or other Storport drivers).
The disk filter driver implements IRP_MJ_SCSI and also IOCTL_SCSI_PASS_THROUGH_DIRECT and IOCTL_SCSI_PASS_THROUGH_DIRECT_EX in the IRP_MJ_DEVICE_CONTROL.
Even with these, on certain systems, my filter driver is not seeing all requests. Or at least I think I am missing some requests.
For example, if I put a breakpoint on the underlying Storport's read/write routines, those breakpoints hit and my driver is not on the call stack.
This is Windows 10 1903 if it matters.
How do I guarantee that all disk accesses are routed through my filter driver?. i though implementing IRP_MJ_SCSI and the above were enough.
|Upcoming OSR Seminars|
|OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead!||Kernel Debugging||30 Mar 2020||OSR Seminar Space|
|Developing Minifilters||15 Jun 2020||LIVE ONLINE|
|Writing WDF Drivers||22 June 2020||LIVE ONLINE|
|Internals & Software Drivers||28 Sept 2020||Dulles, VA|