Reply To: retrieving full process image path name in kernel mode

Home Forums Discussions General Discussion retrieving full process image path name in kernel mode Reply To: retrieving full process image path name in kernel mode

#5883

dkg0414
Participant

But How to enumerate Symbolic links
I guess you are talking about these mapping

C:


DeviceHardDiskVolume1
D:


DeviceHardDiskVolume2 .

But in Win2000 I don’t get anything like DeviceHardDiskVolume1 frm EPROCESS block.

Please correct me if i m wrong.

Kind Regards
Deepak Gupta