i write a minifiler file driver,in this driver i must get the dwDesiredAccess when a application attemps to create or open a file.
how can i get dwDesiredAccess from my driver?
thanks~
I suggest you look at the documentation in the IFSkit/WDK under
“FLT_PARAMETERS for IRP_MJ_CREATE”
Data->Iopb->Parameters.Create.SecurityContext->DesiredAccess where Data is the input argument to your callback and is of type PFLT_CALLBACK_DATA