volume info eg: c:\ or d:\ in PFLT_INSTANCE_SETUP_CALLBACK

NTFSD
1

i am working on minifilter driver and i would like to know how can i get drive info eg c:\ or d:\ in PFLT_INSTANCE_SETUP_CALLBACK callback function.
i am interested to recieve create, open, close callback for a particular drive
which i will register for in PFLT_INSTANCE_SETUP_CALLBACK callback if i know the driver letter.
Thanks

2

Get the storage volume device associated with the PFLT_VOLUME structure by
calling FltGetDiskDeviceObject() and then use that device in a call to
IoVolumeDeviceToDosName().

A different approach would be to not make your minifilter auto attach and
instead attach it programmatically from a user mode client by calling
FilterAttach() and passing in the volume(s) you care about . Of course,
whether you can use this approach depends on the architecture of your
solution…

Thanks,
Alex.

3

Does RtlVolumeDeviceToDosName help at all. (you’ll need to convert from your
FltObjects into a PDEVICE_OBJECT first)

wrote in message news:xxxxx@ntfsd…

i am working on minifilter driver and i would like to know how can i get
drive info eg c:\ or d:\ in PFLT_INSTANCE_SETUP_CALLBACK callback function.
i am interested to recieve create, open, close callback for a particular
drive
which i will register for in PFLT_INSTANCE_SETUP_CALLBACK callback if i know
the driver letter.
Thanks