troubleshooting Question

In NtCreateFile how to identify windows system files

Avatar of ILGDRM
ILGDRM asked on
C++Windows XPSystem Programming
6 Comments1 Solution562 ViewsLast Modified:

I want to know that in NtCreateFile how we can distinguish Windows system files calls and win32 application generated files. for example in NtCreateFile i want to indetify Windows system files ( .dll ,.sys etc.) and not on extension base.

Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 6 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 6 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros