IRP Tracker

How IRPTracker tracks IRP to Control Objects of File System Legacy Filter
Driver. From microsoft documentation, CDO cannot be filtered. Is there any
other way to track IRPs to CDO’s?


With legacy filter you can filter almost any device. You just have to know its name or have a pointer to the CDO, so you can attach to it.

Bronislav Gabrhelik