Reply To: retrieving full process image path name in kernel mode

Home › Forums › Discussions › General › retrieving full process image path name in kernel mode › Reply To: retrieving full process image path name in kernel mode

June 14, 2007 at 5:08 am #5883
dkg0414
Participant

    But How to enumerate Symbolic links
    I guess you are talking about these mapping

    C:

    DeviceHardDiskVolume1
    D:

    DeviceHardDiskVolume2 .

    But in Win2000 I don’t get anything like DeviceHardDiskVolume1 frm EPROCESS block.

    Please correct me if i m wrong.

    Kind Regards
    Deepak Gupta