MinifilterResearch

Public notes for my research at github.com/alfarom256/MCP-PoC

Most of these are incomplete / incoherent. Don't use the code in this repo lmao

Name		Name	Last commit message	Last commit date
Latest commit History 47 Commits
.obsidian		.obsidian
drivers		drivers
0.0 Layout.md		0.0 Layout.md
1. What is a FS Minifilter.md		1. What is a FS Minifilter.md
1.1 Writing a file system minifilter.md		1.1 Writing a file system minifilter.md
1.2 Tracing a call from CreateFile to a Minifilter.md		1.2 Tracing a call from CreateFile to a Minifilter.md
2.1 FltRegisterFilter.md		2.1 FltRegisterFilter.md
2.2 FltStartFiltering.md		2.2 FltStartFiltering.md
3. Fltmgr.sys internals.md		3. Fltmgr.sys internals.md
5 Exploitation.md		5 Exploitation.md
Debugging shit.md		Debugging shit.md
FltCreateCommunicationPort.md		FltCreateCommunicationPort.md
Frame KDBG.md		Frame KDBG.md
Goals for Minifilter.md		Goals for Minifilter.md
Linked list manip bsod.md		Linked list manip bsod.md
Pasted image 20220928112541.png		Pasted image 20220928112541.png
Pasted image 20221008161316.png		Pasted image 20221008161316.png
Pasted image 20221008161354.png		Pasted image 20221008161354.png
Pasted image 20221008161448.png		Pasted image 20221008161448.png
README.md		README.md
Translating IRP_MJ To Callback Node.md		Translating IRP_MJ To Callback Node.md
Write-up.md		Write-up.md

Provide feedback