Can we get PID of incognito windows/tab of chrome process in minifilter?

NTFSD
1

I am accessing the file through normal tab and incognito tab of two instances of chrome.
I want to get the PID of incognito windows/tab of chrome process who is accessing the file. I tried in pre operation callback of IRP_MJ_READ but getting same PID irrespective of accessing the file via normal windows or incognito windows . Since in chrome browser, each tab is a separate process so I want PID of those process who is accessing the file.

Can we get it? is it possible to get PID of those process(incognito tab or normal tab ) who is accessing the file of chrome browser.

2

It is not clear to me that Chrome DOES create a separate process for each tab by default anymore. That certainly used to be true.

Have you checked that this is happening, or are you just assuming? Have you tried launching a Chrome with —process-per-tab (or whatever the syntax is) switch?

Peter

3

Ya chrome creates each Tab as process.

4

@jay96612 did you find a solution?