Owlyshield
Owlyshield copied to clipboard
stabality and performance improvements in minifilter
- Fix issue of floating point operations in kernel driver
- Performance improvements
- Upgrade
C
standard toC11
- General stability improvements around IRQL, DriverEntry, etc
- Replace
ZwClose
withFltClose
in minifilter to solve potential memory leak - Refactor code to be more readable and conscience
- Upgrade to
c++20
standard for minifilter - Improve performance of minifilter by using
-O2
and-LTO
alongside release build - Stop using debug libraries for minifilter
- Use ExAllocatePool2 instead of ExAllocatePoolWithTag
I was able to build it in Visual Studio (I only checked for 64bit systems both debug and release)
This would require a change in driver_comm.rs
, I will submit a pull
I still have a doubt about irql though https://github.com/RafWu/RansomWatch/issues/6