Can a MiniFilter Driver Intercept Network Share File Access Requests?

Question

 I have tested and found that when intercepting IRP_MJ_CREATE requests in a minifilter driver, the request is not intercepted by the minifilter driver when executing the following command: `copy \\server\share\file.txt`. My requirement is to intercept this request and redirect the access path to a local file, but I found that the minifilter driver does not detect this access request. How can I intercept this request properly?

Answer 1

Hello,

 

Thank you for posting in Q&A forum.

To further troubleshoot this issue, please kindly try below steps:

1.Double check if the MiniFilter driver is correctly set up to handle IRP_MJ_CREATE requests.

2.Check if the MiniFilter driver has the correct altitude to intercept the requests.

3.Configure a debugging and logging tool to trace the I/O request and see if the filter is being bypassed or not.

 

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

 

Best regards，

Jill Zhou

 

---

If the Answer is helpful, please click "Accept Answer" and upvote it.