I’ve been doing some research into the Windows Filtering Platform and the information available at each of the various filtering layers. In particular, I’ve been focusing on the information available Read more
Kernel mode debugging
I’ve been doing some research into the Windows Filtering Platform and the information available at each of the various filtering layers. In particular, I’ve been focusing on the information available Read more
As a file system filter developer, one of the great pains in life is when a file system operation fails deep in the bowels of the file system. For example, Read more
I was looking at a few different crashes today that were all eerily similar. In doing so, I realized that I hadn’t asked if these were all different systems or Read more
Well, this one took us by surprise… MmBuildMdlForNonPagedPool is the standard shortcut function drivers use to build MDLs describing non-pageable memory. Despite the name, the buffer described by the MDL Read more
Diagnosed yet another crash today that is likely due to the usage of IoBuildDeviceIoControlRequest. Long ago I was burned by this API and vowed to never use it again, but Read more
I found myself in a situation this week where I really wanted to call the API SeTokenIsAdmin. I vaguely remembered some issues around this API, and Googling quickly brought up Read more
In case you’ve missed it, there are tons of changes going on under the covers in WinDbg. There is a fundamental paradigm shift going on in terms of how WinDbg Read more
TL;DR: Don’t waste your time like we did – 1394 boot debugging no longer works on the latest builds on Windows 10. As you might already be aware, native 1394 kernel Read more
Yet another interesting case lands on our doorstep thanks to NTDEV (original post here). I firmly believe that you have zero chance in diagnosing a non-trivial crash if you don’t Read more
[Last updated 31 Aug 2016, 16:11 Eastern time] Update: As of 31 August 2016, we have verified that RS1 symbols are now present and indexed on the MSFT Symbol Server. Yay! Read more
FESF for Linux is Now Shipping!
OSR's Framework for building transparent per-file encryption solutions now supports Linux!
Read More..
Join the OSR Hints and Tips Email List
Want to receive regular technical hints, tips, and notifications of new tech blog postings from OSR? Join our Hints and Tips list!
To join the list just send a blank email to join-osrhints@lists.osr.com.
Developing File System Minifilters
24-28 May 2021, ONLINE ONLY
Course Outline..
Writing WDF Drivers I: Core Concepts
14-18 June 2021, ONLINE ONLY
Course Outline..
Windows Internals & Software Drivers
2-6 August 2021, ONLINE ONLY
Course Outline..
Kernel Debugging & Crash Analysis
27 Sept - 1 Oct 2021 ONLINE ONLY
Course Outline..
Signup to get an email whenever a new issue of The NT Insider is available for download. Note: We never share your email address with others, and we won’t spam you. Why would we?
Be sure to check your junk mail folder for your confirmation, which will come from the “mcsignup.com” domain.,