Zig Shanklin
Reputation: 71
How to change a Process' Privilege Level inside of a Windows File Filter Driver (minifilter driver)?
What Windows kernel API calls are available from a Windows File System Filter Driver (minifilter driver) that allow the driver to change the privilege level to/from SYSTEM/Administrator for a process that was intercepted by the File System Filter Driver when loading the EXE?
Upvotes: 0
Views: 100
Answers (0)
Related Questions
- Elevating process privilege programmatically?
- Which privilege level do drivers run in on Windows?
- Intercept Process Access using a Windows MiniFilter Driver
- Can an administrator bypass MiniFilters ACCESS_DENIED?
- Is there a way to pass an entire file from file system mini filter driver (kernel mode) up to a user mode application?
- Limit access to a pipe to a process (Windows)
- Escalate Privilege at Runtime (Windows API C/C++)
- Restricting process rights
- Block file creation
- Running a process with lowest possible privileges in winapi