enhance fltMc with custom filter? Is it possible?

[npocmaka_]

fltMc does not like like too useful command (not provides more information than fsutil fsinfo or wmic logicaldisk )
but from it help it looks like its possible to load filters that could eventually provide more information about the drives.
But couldn't find much easy readable information how a filter could be created ....

Does anybody has an idea?

[foxidrive]

I hadn't used that command before.

This is what I get with this command - but it requires admin permissions to use in Windows 8, which would limit its usefulness.

Code: Select all

d:\>fltmc volumes |find ":"
C:                              \Device\HarddiskVolume1                  NTFS
M:                              \Device\00000043                         NTFS
D:                              \Device\HarddiskVolume7                  NTFS
Z:                              \Device\HarddiskVolume6                  NTFS

[penpen]

You have to create a dll with the filter, using MS Visual Studio (C++) or similar, see here:
http://msdn.microsoft.com/en-us/library/windows/hardware/ff548143(v=vs.85).aspx
You have to click through:
- File System Filter Drivers, and/or
- File System Minifilter Drivers

penpen

[foxidrive]

It's still going to be a limiting issue that only ADMIN can use it.

[npocmaka_]

Yeah.I saw that....I hoped there's a way to avoid C++-ing .Will see what I can do with this.

[npocmaka_]

I hadn't used that command before.

This is what I get with this command - but it requires admin permissions to use in Windows 8, which would limit its usefulness.

Code: Select all

d:\>fltmc volumes |find ":"
C:                              \Device\HarddiskVolume1                  NTFS
M:                              \Device\00000043                         NTFS
D:                              \Device\HarddiskVolume7                  NTFS
Z:                              \Device\HarddiskVolume6                  NTFS

If I can put more information here I'll able to see supported also operations per drive and check which one is a flash drive (e.g.) ...