DriverMon icon indicating copy to clipboard operation
DriverMon copied to clipboard

Possibility to auto attach

Open bugproof opened this issue 6 years ago • 3 comments

Is this possible to auto attach as soon as the driver loads?

bugproof avatar Jan 10 '18 14:01 bugproof

Currently, no. But I have an idea on how to do it...

zodiacon avatar Jan 10 '18 16:01 zodiacon

Is there some kind of notification or it will be a constant checking?

bugproof avatar Jan 11 '18 08:01 bugproof

Constant checking won't work, since you'd surely miss it. I would start with PsSetLoadImageNotifyRoutine and when the driver file in question loads prepare to hook. Although I need to think of the exact details on how to do it, since the driver file loading in this regard is perhaps a bit too early.

zodiacon avatar Jan 11 '18 08:01 zodiacon