PreOperationCallback trigger source RRS feed

  • Question

  • Hello,

    I'm developping a driver which monitors accesses to processes (using the ObRegisterCallbacks function). I would like to know if there is a way to know which process triggered the system call when my PreOperationCallback function is called.

    Does anyone know how?

    Best regards,

    Max H.

    Monday, May 27, 2013 9:16 AM


All replies