Detecting whether a transaction came from my driver or not...

NTFSD
1

Is there a good way to determine whether or not an IRP_MJ_WRITE transaction
was initiated by my driver’s call to ZwWriteFile(…) or whether it’s from
elsewhere?

thanks! - jb

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com