WDF - filter driver for sandbox

Question

I want to intercept file (ReadFile, WriteFile) operations and registry calls of some program. I decided that filter driver will be the best solution. Is it possible to do that from WDF or I need to learn WDM? Are there any samples?

score 0 · Accepted Answer · answered Oct 05 '13 at 21:32

0

OK, minifilter is the right solution

answered Oct 05 '13 at 21:32

paralen

117
6

WDF - filter driver for sandbox

1 Answers1