Re: Canonical names for kernel objects
- From: "Ben Kial" <benkial@xxxxxxxxxxx>
- Date: 20 Jul 2005 22:54:24 -0700
Thanks for the replies.
But I am not sure how CreateFile can help me...
What I need is a way to monitor access to a given file from kernel.
In order to do that, I need to have a way to know that "\??\C:\x.txt"
is
actually the same as "\Device\Harddisk0\Partition1\x.txt" so that when
different applications passing different variations of a same object,
my
code can unambiguously identify it.
So far, looks like the only way to convert a path with symbolic links
is
to parse each "node" and expand the symbolic link...
Ben
.
- References:
- Canonical names for kernel objects
- From: Ben Kial
- Re: Canonical names for kernel objects
- From: Eugene Gershnik
- Re: Canonical names for kernel objects
- From: Ben Kial
- Re: Canonical names for kernel objects
- From: Eugene Gershnik
- Re: Canonical names for kernel objects
- From: Pavel A.
- Canonical names for kernel objects
- Prev by Date: Re: bug in visual studio .net 2003 - breakpoints and memcpy
- Next by Date: Re: Problem in enabling internal loopback mode on serial port
- Previous by thread: Re: Canonical names for kernel objects
- Next by thread: SysInternals Process Explorer question
- Index(es):
Relevant Pages
|