Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results
More Info on Driver Writing and Debugging
The free OSR Learning Library has more than 50 articles on a wide variety of topics about writing and debugging device drivers and Minifilters. From introductory level to advanced. All the articles have been recently reviewed and updated, and are written using the clear and definitive style you've come to expect from OSR over the years.
Check out The OSR Learning Library at: https://www.osr.com/osr-learning-library/
Get remote host name on a network shared file access in mini-filter drive
I am writing a mini-filter driver to allow or block Network shared file access for specific hosts in a network. I have detected for Any network access with the SourceName field using SeQueryInformationToken().
If the SourceName field is **NtLmSsp **the request is from the network.
Till now I can Only detect the network file access But somehow I am not able to find out the HostName/IP for the remote machine.
How can I identify the remote IP/hostName in network shared file access?
Any hints/ideas will be much appreciated.
Thanks to OSR community.
Platform: Windows, Language: c
| Upcoming OSR Seminars | ||
|---|---|---|
| OSR has suspended in-person seminars due to the Covid-19 outbreak. But, don't miss your training! Attend via the internet instead! | ||
| Writing WDF Drivers | 7 Dec 2020 | LIVE ONLINE |
| Internals & Software Drivers | 25 Jan 2021 | LIVE ONLINE |
| Developing Minifilters | 8 March 2021 | LIVE ONLINE |
Comments
I’m moving this to the proper category,
NTFSD is for File System Drivers and minifilters.
Peter
Peter Viscarola
OSR
@OSRDrivers
Thanks.
See SRV_OPEN_ECP_CONTEXT
-scott
OSR
@Scott_Noone_(OSR) Can you please provide some example or any link?
Did you search? The minispy sample from the WDK shows how to use it.
-scott
OSR
ya, I did, but didn't find.
@Scott_Noone_(OSR) Thank you very much for the info. I got it today.