WDK Mini Filter Example
ncfsctrl.c File Reference
#include "nc.h"

Go to the source code of this file.

Functions

NTSTATUS NcFindFilesBySidTranslateBuffers (_In_ PNC_INSTANCE_CONTEXT InstanceContext, _In_ BOOLEAN IgnoreCase, _In_ PUNICODE_STRING UserRequestName, _In_ PUNICODE_STRING OpenedName, _In_ PFILE_NAME_INFORMATION InputSystemBuffer, _Out_writes_bytes_to_(OutputBufferLength, *OutputBufferWritten) PFILE_NAME_INFORMATION OutputUserBuffer, _In_ ULONG InputBufferLength, _In_ ULONG OutputBufferLength, _Out_ PULONG InputBufferConsumed, _Out_ PULONG OutputBufferWritten, _In_ BOOLEAN ReturnRealMappingPaths)
 
NTSTATUS NcUsnTranslateBuffers (_In_ PNC_INSTANCE_CONTEXT InstanceContext, _In_ BOOLEAN IgnoreCase, _In_ ULONGLONG RealMappingParentId, _In_ ULONGLONG UserMappingParentId, _In_ PUSN_RECORD InputSystemBuffer, _Out_writes_bytes_to_(OutputBufferLength, *OutputBufferWritten) PUSN_RECORD OutputUserBuffer, _In_ ULONG InputBufferLength, _In_ ULONG OutputBufferLength, _Out_ PULONG InputBufferConsumed, _Out_ PULONG OutputBufferWritten)
 
VOID NcPostReadUsnJournalWorker (_In_ PFLT_GENERIC_WORKITEM WorkItem, _In_ PFLT_FILTER Filter, _In_ PVOID Context)
 
NTSTATUS NcStreamHandleContextFindBySidCreate (_Out_ PNC_FIND_BY_SID_CONTEXT Context)
 
VOID NcStreamHandleContextFindBySidClose (_In_ PNC_FIND_BY_SID_CONTEXT Context)
 
FLT_PREOP_CALLBACK_STATUS NcPreFindFilesBySid (_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _Flt_CompletionContext_Outptr_ PVOID *CompletionContext)
 
FLT_POSTOP_CALLBACK_STATUS NcPostFindFilesBySid (_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ PVOID CompletionContext, _In_ FLT_POST_OPERATION_FLAGS Flags)
 
FLT_POSTOP_CALLBACK_STATUS NcPostReadFileUsnData (_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_opt_ PVOID CompletionContext, _In_ FLT_POST_OPERATION_FLAGS Flags)
 
FLT_POSTOP_CALLBACK_STATUS NcPostEnumUsnData (_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_opt_ PVOID CompletionContext, _In_ FLT_POST_OPERATION_FLAGS Flags)
 
FLT_POSTOP_CALLBACK_STATUS NcPostReadUsnJournal (_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_opt_ PVOID CompletionContext, _In_ FLT_POST_OPERATION_FLAGS Flags)
 

Function Documentation

◆ NcFindFilesBySidTranslateBuffers()

NTSTATUS NcFindFilesBySidTranslateBuffers ( _In_ PNC_INSTANCE_CONTEXT  InstanceContext,
_In_ BOOLEAN  IgnoreCase,
_In_ PUNICODE_STRING  UserRequestName,
_In_ PUNICODE_STRING  OpenedName,
_In_ PFILE_NAME_INFORMATION  InputSystemBuffer,
_Out_writes_bytes_to_(OutputBufferLength, *OutputBufferWritten) PFILE_NAME_INFORMATION  OutputUserBuffer,
_In_ ULONG  InputBufferLength,
_In_ ULONG  OutputBufferLength,
_Out_ PULONG  InputBufferConsumed,
_Out_ PULONG  OutputBufferWritten,
_In_ BOOLEAN  ReturnRealMappingPaths 
)

Definition at line 178 of file ncfsctrl.c.

◆ NcPostEnumUsnData()

FLT_POSTOP_CALLBACK_STATUS NcPostEnumUsnData ( _Inout_ PFLT_CALLBACK_DATA  Data,
_In_ PCFLT_RELATED_OBJECTS  FltObjects,
_In_opt_ PVOID  CompletionContext,
_In_ FLT_POST_OPERATION_FLAGS  Flags 
)

Definition at line 2906 of file ncfsctrl.c.

◆ NcPostFindFilesBySid()

FLT_POSTOP_CALLBACK_STATUS NcPostFindFilesBySid ( _Inout_ PFLT_CALLBACK_DATA  Data,
_In_ PCFLT_RELATED_OBJECTS  FltObjects,
_In_ PVOID  CompletionContext,
_In_ FLT_POST_OPERATION_FLAGS  Flags 
)

Definition at line 1092 of file ncfsctrl.c.

◆ NcPostReadFileUsnData()

FLT_POSTOP_CALLBACK_STATUS NcPostReadFileUsnData ( _Inout_ PFLT_CALLBACK_DATA  Data,
_In_ PCFLT_RELATED_OBJECTS  FltObjects,
_In_opt_ PVOID  CompletionContext,
_In_ FLT_POST_OPERATION_FLAGS  Flags 
)

Definition at line 2520 of file ncfsctrl.c.

◆ NcPostReadUsnJournal()

FLT_POSTOP_CALLBACK_STATUS NcPostReadUsnJournal ( _Inout_ PFLT_CALLBACK_DATA  Data,
_In_ PCFLT_RELATED_OBJECTS  FltObjects,
_In_opt_ PVOID  CompletionContext,
_In_ FLT_POST_OPERATION_FLAGS  Flags 
)

Definition at line 3576 of file ncfsctrl.c.

◆ NcPostReadUsnJournalWorker()

VOID NcPostReadUsnJournalWorker ( _In_ PFLT_GENERIC_WORKITEM  WorkItem,
_In_ PFLT_FILTER  Filter,
_In_ PVOID  Context 
)

Definition at line 3241 of file ncfsctrl.c.

◆ NcPreFindFilesBySid()

FLT_PREOP_CALLBACK_STATUS NcPreFindFilesBySid ( _Inout_ PFLT_CALLBACK_DATA  Data,
_In_ PCFLT_RELATED_OBJECTS  FltObjects,
_Flt_CompletionContext_Outptr_ PVOID *  CompletionContext 
)

Definition at line 587 of file ncfsctrl.c.

◆ NcStreamHandleContextFindBySidClose()

VOID NcStreamHandleContextFindBySidClose ( _In_ PNC_FIND_BY_SID_CONTEXT  Context)

Definition at line 113 of file ncfsctrl.c.

◆ NcStreamHandleContextFindBySidCreate()

NTSTATUS NcStreamHandleContextFindBySidCreate ( _Out_ PNC_FIND_BY_SID_CONTEXT  Context)

Definition at line 75 of file ncfsctrl.c.

◆ NcUsnTranslateBuffers()

NTSTATUS NcUsnTranslateBuffers ( _In_ PNC_INSTANCE_CONTEXT  InstanceContext,
_In_ BOOLEAN  IgnoreCase,
_In_ ULONGLONG  RealMappingParentId,
_In_ ULONGLONG  UserMappingParentId,
_In_ PUSN_RECORD  InputSystemBuffer,
_Out_writes_bytes_to_(OutputBufferLength, *OutputBufferWritten) PUSN_RECORD  OutputUserBuffer,
_In_ ULONG  InputBufferLength,
_In_ ULONG  OutputBufferLength,
_Out_ PULONG  InputBufferConsumed,
_Out_ PULONG  OutputBufferWritten 
)

Definition at line 2153 of file ncfsctrl.c.

Social Network


Services Overview

Architect, implement and test file system filter drivers for a wide range of functionality. We can offer several levels of assistance to meet your specific.

Contact Us

You are welcome to contact us for salse or partnership.

Sales: sales@easefilter.com
Support: support@easefilter.com
Info: info@easefilter.com