User-Mode Library
The filter manager user mode interfaces provide common functionality for products that include filter drivers. The user-mode library is Fltlib.dll. Applications include the header files FltUser.h and FltUserStructures.h, and link to FltLib.lib.
These user-mode interfaces enable general control of the minifilter driver and communication between the user-mode service or control program and the filter driver. User-mode interfaces also provide interfaces for management tools that allow enumeration of filters, volumes, and instances.
For minifilters, user-mode communication APIs do not require administrator privileges. Instead, a minifilter defines the necessary privilege using an ACL defined on a port.
Filter Manager User-Mode Library Routines
The filter manager provides the following support routines for user-mode applications to use for loading and unloading minifilter drivers:
The following support routines are provided for creating and closing minifilter driver and instance handles:
The following support routines are provided for attaching and detaching minifilter driver instances:
The following support routines are provided for enumerating filters, volumes, and instances:
The following support routines are provided for querying for information:
The following support routines are provided for communication initiated by a user operation:
FilterConnectCommunicationPort
The following support routines are provided for responding to communication initiated by a minifilter driver:
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for