CODEWITHSUNDEEP
windowscmddriverminifilter
Ajit Medhekar
Ajit Medhekar

Reputation: 1078

How to get version of installed minifilter driver?

I'm having some minifilter drivers installed on my system. I want to find the version of minifilter driver which is installed. I tried fltmc command to load/unload the drivers.
Is there any command to find the version of installed minifilter drivers on windows ?

Upvotes: 0

Views: 898

Answers (1)

Martin Drab
Martin Drab

Reputation: 697

I suppose that the easiest solution to this problem is the following:

  1. list running minifilters via fltmc,
  2. lookup service keys for the listed filters (HKLM\SYSTEM\CurrentControlSet\services\<filter_name> should do the job),
  3. get file names of the corresponding drivers,
  4. look into the version info inside their files.

If you mean the value of the Version member of the FLT_REGISTRATION structure, this field should always be filled with FLT_REGISTRATION_VERSION.

Upvotes: 3

Related Questions