Function_IRPMonDllDriverNameWatchRegister

IRPMonDllDriverNameWatchRegister function

Summary

Instructs the IRPMon driver to automatically start monitoring a driver with the given name when its presence is detected.

Definition

void cdecl IRPMonDllDriverNameWatchRegister(
    System.Char* DriverName,
    _DRIVER_MONITOR_SETTINGS* MonitorSettings
   );

Parameters

DriverName

Full name of the target driver object.

MonitorSettings

Defines which types of requests should be monitored and logged.

Return Value

One of the following values may be returned:

Value	Description
ERROR_SUCCESS	The IRPMon driver is now watching for the given driver.
Other	An error occurred.

Remarks

The driver name specified in the DriverName must be an absolute name in the Object Manager namespace. In other words, it should usually contain the \Driver\ or \FileSystem\ prefix.

Watching for drivers with specific names makes sense especially with device setup class watching, see IRPMonDllClassWatchRegister for more details.

Use IRPMonDllDriverNameWatchUnregister to stop watching for the given driver.

See also

• IRPMonDllClassWatchRegister
• IRPMonDllDriverNameWatchUnregister

Requirements

Header	irpmondll.h
Library	irpmondll.lib
DLL	irpmondll.dll