Something Wrong With Bdfsfltr
I have a driver that it is a filesystem filter driver. Its fsd filter device above th bdfsfltr. When IO MANAGER send IRP_MJ_CRRATE to the top of fsd device stack,my fsd filter device will call ZwCreateFile,cause a IRP_MJ_CREATE to lower device,reach to bdfsfltr. Then bdfsfltr will get the name of the file that send…
