Filter driver for cache access.

NTDEV
1

Hello,

Is it possible to create a filter driver for the filesystem chache?
If so could you give me a starting point, please.
I was not able to find anything about this in my books.

Best Regards
Michael

2

Yes, you can write a filesystem filter using Microsoft’s IFSKIT that
will allow you to intercept all cached and non-cached accesses to files
(with one exception - you can’t intercept memory reads/writes to a
memory-mapping, and a file memory-mapping actually shares its physical
pages with the filesystem cache).

Michael Kurz wrote:

Hello,

Is it possible to create a filter driver for the filesystem chache?
If so could you give me a starting point, please.
I was not able to find anything about this in my books.

Best Regards
Michael

–
Nick Ryan (MVP for DDK)