Owlyshield
Owlyshield copied to clipboard
stabality and performance improvements in minifilter
- Fix issue of floating point operations in kernel driver
- Performance improvements
- Upgrade
Cstandard toC11 - General stability improvements around IRQL, DriverEntry, etc
- Replace
ZwClosewithFltClosein minifilter to solve potential memory leak - Refactor code to be more readable and conscience
- Upgrade to
c++20standard for minifilter - Improve performance of minifilter by using
-O2and-LTOalongside release build - Stop using debug libraries for minifilter
- Use ExAllocatePool2 instead of ExAllocatePoolWithTag
I was able to build it in Visual Studio (I only checked for 64bit systems both debug and release)
This would require a change in driver_comm.rs, I will submit a pull
I still have a doubt about irql though https://github.com/RafWu/RansomWatch/issues/6