NT OS KERNEL Module Name

NTDEV
1

Is it possible to get the Kernel Module name calling any function ?
I need to know the name of the module loaded as kernel module, you know, the
module usually called NTOSKRNL.EXE.
I wonder whether is it possible to get the actual name some way, of course
other than parsing the BOOT.INI file.

Inaki.

2

I believe that EnumDeviceDrivers always returns the kernel module name
as its first parameter, but this is undocumented behavior.

Iñaki Castillo wrote:

Is it possible to get the Kernel Module name calling any function ?
I need to know the name of the module loaded as kernel module, you know,
the module usually called NTOSKRNL.EXE.
I wonder whether is it possible to get the actual name some way, of
course other than parsing the BOOT.INI file.

Inaki.

–
Nick Ryan
(Microsoft Windows MVP for DDK)