A forum for reverse engineering, OS internals and malware analysis 

Forum for discussion about kernel-mode development.
 #2647  by zeuk
 Sun Sep 05, 2010 12:41 pm
Hey,

I was wondering what is the fastest and most reliable method to send data from a keyboard filter to a user app. I want to send the key pressed to a user app which will then process it. I believe that a PnP style notification is not possible on a filter, which would meet the fast & reliable requirements. Any ideas?
 #2651  by Fabian Wosar
 Sun Sep 05, 2010 5:48 pm
I am not entirely sure at what IRQL your code will get executed but I would most likely go with something like this:
http://www.osronline.com/article.cfm?id=94

In addition you can (ab-)use the file system filter message API (FltSendMessage etc.) or use LPC directly (http://zezula.net/en/prog/lpc.html).