How can i hide a file?

NTFSD
1

Hello!

I tried using IRP_MJ_DIRECTORY_CONTROL to get the files list, but I don’t
know how. Which parameters should i look for? How can i process the list
in order the match the file?

Regards,
Razvan

2

catch irp,IRP_MJ_DIRECTORY_CONTROL IRP_MN_QUERY_DIRECTORY

and set IoSetCompletionRoutine(),

when query is finished, then you can handle the contents of dir.

The struct of PFILE_BOTH_DIR_INFORMATION would be helpful for you.