'how can i observe interaction/communication between a process (user land) and a driver in windows

I tried to trace some known network API functions in some Sysinternals tools in order to observe/capture the interaction between a process and a driver (say for example arp.exe interaction with the network adapter driver?, what IOCTL is used etc.. ) I was wondering if there is any suitable way to do that besides debugging a program

thanks in advance!

Solution 1:^[1]

You can use IRP Logger of Windows Driver verifier to get basic information about IRP coming to the driver. (Including from user space)

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution	Source
Solution 1	Baget

'how can i observe interaction/communication between a process (user land) and a driver in windows

Solution 1:[1]

Sources

Related Questions

Solution 1:^[1]