WDK Mini Filter Example
scan.h
Go to the documentation of this file.
1 /*++
2 
3 Copyright (c) 2011 Microsoft Corporation
4 
5 Module Name:
6 
7  scan.h
8 
9 Abstract:
10 
11  This module contains the scan interface for AV filter to call.
12 
13 Environment:
14 
15  Kernel mode
16 
17 --*/
18 #ifndef __SCAN_H__
19 #define __SCAN_H__
20 
21 #include "avlib.h"
22 
23 typedef enum _AV_SCAN_MODE {
24 
25  //
26  // AvKernelMode indicates the scanning occurs in the kernel, while
27  // AvUserMode indicates the scanning happens in the user space.
28  //
29 
32 
33 } AV_SCAN_MODE;
34 
35 NTSTATUS
37  _In_ PCFLT_RELATED_OBJECTS FltObjects,
38  _In_ UCHAR IOMajorFunctionAtScan,
39  _In_ BOOLEAN IsInTxWriter,
40  _In_ PAV_STREAM_CONTEXT StreamContext
41  );
42 
43 NTSTATUS
45  _Inout_ PFLT_CALLBACK_DATA Data,
46  _In_ PCFLT_RELATED_OBJECTS FltObjects,
47  _In_ UCHAR IOMajorFunctionAtScan,
48  _In_ BOOLEAN IsInTxWriter,
49  _In_ DEVICE_TYPE DeviceType
50  );
51 
52 NTSTATUS
54  _In_ PFLT_INSTANCE Instance,
55  _In_ PFILE_OBJECT FileObject,
56  _Inout_ PAV_SECTION_CONTEXT SectionContext
57  );
58 
59 NTSTATUS
61  _Inout_ PAV_SECTION_CONTEXT SectionContext
62  );
63 
64 #endif
65 
NTSTATUS AvCreateSectionForDataScan(_In_ PFLT_INSTANCE Instance, _In_ PFILE_OBJECT FileObject, _Inout_ PAV_SECTION_CONTEXT SectionContext)
_In_opt_ PFILE_OBJECT _In_opt_ PFLT_INSTANCE Instance
Definition: nc.h:493
_AV_SCAN_MODE
Definition: scan.h:23
NTSTATUS AvScanInKernel(_In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ UCHAR IOMajorFunctionAtScan, _In_ BOOLEAN IsInTxWriter, _In_ PAV_STREAM_CONTEXT StreamContext)
Definition: scan.c:220
enum _AV_SCAN_MODE AV_SCAN_MODE
NTSTATUS AvCloseSectionForDataScan(_Inout_ PAV_SECTION_CONTEXT SectionContext)
Definition: scan.c:542
_In_opt_ PFILE_OBJECT FileObject
Definition: nc.h:493
NTSTATUS AvScanInUser(_Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _In_ UCHAR IOMajorFunctionAtScan, _In_ BOOLEAN IsInTxWriter, _In_ DEVICE_TYPE DeviceType)
Definition: scan.c:337

Social Network


Services Overview

Architect, implement and test file system filter drivers for a wide range of functionality. We can offer several levels of assistance to meet your specific.

Contact Us

You are welcome to contact us for salse or partnership.

Sales: sales@easefilter.com
Support: support@easefilter.com
Info: info@easefilter.com