A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com
Description of the feature, modification, idea or suggestion
Tools - System - Object Manager shows the content of "\" by calling NtQueryDirectoryObject recursively.
This approach overlooks one particular directory - ?? (a.k.a. "local \DosDevices"), which is not returned when querying the root directory, unlike the global version of \DosDevices (GLOBAL??).
This directory typically contains a symbolic link to Global, network drives, subst drives and whatever else the user defined with DefineDosDevice.
This information is also available under \Sessions\<SESSION_ID>\DosDevices\<LOGON_SESSION_ID>, but getting there is more cumbersome and requires Administrator rights.
Proposed implementation details (optional)
It can be added manually (I'm not familiar with the code, so apologies if something is horribly wrong):
Description of the feature, modification, idea or suggestion
Tools - System - Object Manager shows the content of "\" by calling
NtQueryDirectoryObject
recursively. This approach overlooks one particular directory -??
(a.k.a. "local\DosDevices
"), which is not returned when querying the root directory, unlike the global version of\DosDevices
(GLOBAL??
). This directory typically contains a symbolic link toGlobal
, network drives, subst drives and whatever else the user defined withDefineDosDevice
.This information is also available under
\Sessions\<SESSION_ID>\DosDevices\<LOGON_SESSION_ID>
, but getting there is more cumbersome and requires Administrator rights.Proposed implementation details (optional)
It can be added manually (I'm not familiar with the code, so apologies if something is horribly wrong):
The result:
Links: https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/local-and-global-ms-dos-device-names https://www.osronline.com/article.cfm%5Earticle=381.htm https://superuser.com/questions/884347/win32-and-the-global-namespace https://stackoverflow.com/questions/4686897/sessions-window-stations-and-desktops