Multiple ELAM drivers RRS feed

  • Question

  • Can there be more than one active ELAM driver at the same time?

    It's unclear from the documentation how this is supposed to work.

    Thanks in advance!

    Friday, May 31, 2019 7:45 PM


  • Yes, but they must be loaded very early (SERVICE_BOOT_START) in the boot sequence. The registration window is closed and no other ELAM drivers may be registered after that (IoRegisterBootDriverCallback returns failure status)


    Azius Developer Training Windows device driver, internals, security, & forensics training and consulting. Blog at

    Friday, May 31, 2019 8:36 PM