'Using Windows Kernel Driver -- User Mode to get File Information
Good Day!
Can you please let me know, if I can get the information and print(in command line from a variable) of all files opened or read from say D:\ using an User Mode Kernel Driver?
Can I use WinDbg to debug the same driver and get the file information viewed?, As I felt it as a safe mode to avoid crashing the system.
Can you please let me know the process to do that?
Please accept my apologies, if it's a sub standard question, I am new to Windows Driver Development and As of now, I am learning the processes.
Thanks Guru
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|