Category Archives: Reversing


Documented Behavior The IO_IGNORE_SHARE_ACCESS_CHECK flag provides a way for Windows kernel components to bypass sharing checks while opening local files. NTFSD has lots of posts on the subject — see here, here, here, etc… MSDN discusses the flag as well … Continue reading

Posted in File System, Reversing, Windows | Leave a comment