Category "windows-kernel"

How to allocate heap in kernel space for an array of fix-sized arrays of characters?

I know that in kernel space one usually uses ExAllocatePoolWithTag function, but I don't know how to allocate memory for a dynamically-sized array of fixed-size

Trouble passing a C# string from userland to kernelmode C and using it to find specific LDR_DATA_TABLE_ENTRY

I am having difficulty comparing a string passed from usermode type LPWSTR to a LDR table entry type UNICODE_STRING Kernel C: struct { int pid; int user

How to filter read calls using minifilter driver?

I'm completely new to minifilter drivers. In fact new to windows development as such. I want to create a minifilter driver, attach it to one of my local disk( s