Skip to content

Nukem9/BindFltAPI

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 
 
 
 
 
 
 

Repository files navigation

bindfltapi

Undocumented BindFlt user mode API otherwise known as bindfltapi.dll, bindflt.dll, or bindlink.dll.

Information has been sourced from BuildXL, hcsshim, and go-winio. BindFlt's public successor, Bindlink, was introduced roughly a year ago but still hasn't been released at the time of writing.

This header expects machines to be running Windows 10 RS6 or newer. Older editions have minor API changes and aren't guaranteed to work.

Building the example

  • CMake and vcpkg are expected to be set up beforehand. Visual Studio 2022 is recommended.
  • Open the directory in Visual Studio and select the Debug x64 or Release x64 preset.
  • Build.
  • Run BindfltAPIDemo.exe.

License