Tuesday, March 27, 2012 3:49 AM
Is ELAM (Early lunch Anti Malware) a Microsoft driver or a 3rd parity driver?
Tuesday, March 27, 2012 9:16 PMAnswerer
this is a demo driver from Microsoft:
Early Launch Anti-Malware Sample
This sample demonstrates how to use the APIs IoRegisterBootDriverCallback and IoUnRegisterBootDriverCallback from an Early Launch Anti-Malware driver, to receive notifications about the initialization of regular boot start drivers. The building and installation instructions given here apply to Windows® 8 and later operating systems. This sample driver is a minimal driver meant to demonstrate the usage of the APIs mentioned above. It is not intended for use in a production environment.
"A programmer is just a tool which converts caffeine into code"
Friday, April 20, 2012 12:36 PMELAM can be implemented as either.
--Joseph [MSFT] http://blogs.technet.com/b/joscon/
- Marked As Answer by Arthur XieMicrosoft Contingent Staff, Moderator Tuesday, May 08, 2012 9:02 AM