-
MSDN writes that ETHREAD->TopLevelIrp contain pointer to IRP or FSRTL flags like FSRTL_FSP_TOP_LEVEL_IRP. But in real world it may contain any value. Most common routines analyze that IoGetTopLevelIrp…
-
I'm new to driver development and I'm trying to learn more about process hacker
I saw PsGetCurrentProcessId is used inside KphDispatchCreate to get the connecting client pid but on microsoft IoGetReq…
-
A simple user (Local Group Memberships, *Remote Desktop Users, Global Group memberships *Domain Users) with no permission to write in any shares, got nt system shell:
```
> smbmap.py -u *****…
-
## Question
_Please consider asking questions in the [WinFsp Google Group](https://groups.google.com/forum/#!forum/winfsp) instead. Before asking a question please also consult the [WinFsp Frequent…
-
- [x] Change Migration By activity to treemap
- [x] Think about re design Migration by Sex and By Age: "Estos totales dicen poco (solo genero sin conectar genero con origen o nivel educacional). Mejo…
-
If I open YubiKey Piv Manager (1.4.2) on Windows 10 CU, then insert my YubiKey 4, everything works great the first time. It recognizes the YubiKey and allows me to initialize it. However, if I remove …
-
Windows-driver-samples\trunk\filesys\miniFilter\simrep\simrep.c
有如下两行信息：
buffer = ExAllocatePoolWithTag( PagedPool, SIMREP_STRING_TAG, bufferLength );
buffer = ExAllocatePoolWithTag( PagedPool, SIM…
-
Quick question: Do I have to implement the whole system (as in my own FAT/NTFS/Etc) or, at my programs discretion, ignore certain file read/write requests and have it fall back to the default file sys…
-
minifilter-->FileDispositionInformation
can not protect files
shift+delete can delete files, so how can i stop this?
-
Feature request can skip this form. Bug report **must** complete it. `Check List` must be 100% match or it will be automatically closed without further discussion. Please remove this line.
# Enviro…