Module owlyshield_ransom::driver_com [−][src]
Expand description
Low-level communication with the minifilter.
Modules
Contains all definitions shared between this usermode app and the minifilter in order to communicate properly. Those are C-representation of structures sent or received from the minifilter.
Structs
A minifilter is identified by a port (know in advance), like a named pipe used for communication, and a handle, retrieved by Self::open_kernel_driver_com.
The usermode app (this app) can send several messages types to the driver. See DriverComMessageType for details. Depending on the message type, the pid, gid and path fields can be optional.
Enums
See shared_def::IOMessage struct and this doc.
Messages types to send directives to the minifilter, by using te DriverComMessage struct.
See shared_def::IOMessage struct and this doc.