[Xearinox]

Hello masters.

How to password protect folders from kernel mode, like a Windows EFS do.
Any hints or suggestions are welcome. ;)

[R00tKit]

minifilter /Filer -> in filter IRP for open/Create folder/file set/check custom ACL(any policy ) and if need send notify to user mode via minifilter communication port or / IOCTL and get password if pass is correct allow IRP if not deny it :mrgreen:

[FileSystem_Driver]

hi , You can put your password within a protected file or a registry key , and Through IOCTL verify your password from user mode , , , , , , , :!: