hi,
I wanna use fltxxx api in process-creation notify routines,
ِِdo we have any restriction about that?
Is it correct to use this؟
Generally, they work. But PCN can be called with kernel APCs disabled,
meaning those APIs should not be used then.
Kind regards, Dejan.
https://www.alfasp.com
1 Like
thank you
You mean that if we can call some flt function in passive level, so then we can use it without any problems?
Yes. But you cannot offload work to a worker thread and wait
Kind regards, Dejan.
https://www.alfasp.com
1 Like
Ok,
thank you a lot