Windows Filtering Platform internals - Reverse Engineering the callouts mechanism
Reversing the WFP callout mechanism
Recent posts
AudioGuard : controlling microphone access on per-process basis
controlling microphone access on per-process basis
RansomGuard : an anti-ransomware filter driver
Anti Ransomware minifilter driver