appropriate way to use fltxxx api on process creation notify

hi,
I wanna use fltxxx api in process-creation notify routines,
ِِdo we have any restriction about that?
Is it correct to use this؟

Generally, they work. But PCN can be called with kernel APCs disabled,
meaning those APIs should not be used then.

Kind regards, Dejan.
https://www.alfasp.com

1 Like

thank you
You mean that if we can call some flt function in passive level, so then we can use it without any problems?

Yes. But you cannot offload work to a worker thread and wait :slight_smile:

Kind regards, Dejan.
https://www.alfasp.com

1 Like

Ok,
thank you a lot