IoCreateDriver
June 5, 2026 ยท View on GitHub
I am just sharing an implementation of IoCreateDriver (which can be found in ntoskrnl.exe),
it bypasses EtwTiLogDriverObjectLoad
Build example:
Within the repository is preset an example that must be compiled using VisualStudio in combination
with the WDK provided by microsoft.
If you're manual mapping:
Remember that if you're manual mapping:
- You must turn off the security check in
ProjectSettings -> C/C++ -> Security Check - You also have to change the entry point from
FxDriverEntrytoDriverEntry
which you can find inProjectSetting -> Linker -> Entry Point
- Th3Spl