none
Multiple ELAM drivers RRS feed

  • Question

  • Can there be more than one active ELAM driver at the same time?

    It's unclear from the documentation how this is supposed to work.

    Thanks in advance!

    Friday, May 31, 2019 7:45 PM

Answers

  • Yes, but they must be loaded very early (SERVICE_BOOT_START) in the boot sequence. The registration window is closed and no other ELAM drivers may be registered after that (IoRegisterBootDriverCallback returns failure status)

     -Brian


    Azius Developer Training www.azius.com Windows device driver, internals, security, & forensics training and consulting. Blog at www.azius.com/blog

    Friday, May 31, 2019 8:36 PM
    Moderator