Tracing and Logging Technologies on Windows. Part 3 - User Mode Handles in the Kernel

Maxim Kartavenkov

Rate me:

5.00/5 (5 votes)

5 Jul 2023CPOL24 min read

4.8K

150

Continue discussion of the simple kernel drivers tracing mechanisms by using output information into the handles of the files pipes and console passed to the driver from the host application.

On the first article we discuss redirecting output from the console of the application into files or pipes. In this article we showing how to pass those handles to the drivers. Discovers underwater stones and possible issues which are related to our target. Related examples implemented in C++ and C#.

Views

Daily Counts

Downloads

Weekly Counts

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Written By

Maxim Kartavenkov

Software Developer (Senior)

Russian Federation

I'm a professional multimedia developer (more than 10 years) in any kind of applications and technologies related to it, such as DirectShow, Direct3D, WinMM, OpenGL, MediaFoundation, WASAPI, Windows Media and other including drivers development of Kernel Streaming, Audio/Video capture drivers and audio effects. Have experience in following languages: C, C++, C#, delphi, C++ builder, VB and VB.NET. Strong knowledge in math and networking.

Tracing and Logging Technologies on Windows. Part 3 - User Mode Handles in the Kernel

Views

Downloads

License

Comments and Discussions