Locked ELAM in windows 8

  • Tuesday, March 27, 2012 3:49 AM
     
     

    Hi,

    Is ELAM (Early lunch Anti Malware) a Microsoft driver or a 3rd parity driver?

    thanks!

All Replies

  • Tuesday, March 27, 2012 9:16 PM
    Answerer
     
     Answered

    this is a demo driver from Microsoft:

    http://code.msdn.microsoft.com/windowshardware/ELAMSAMPLE-57962099

    Early Launch Anti-Malware Sample

    This sample demonstrates how to use the APIs IoRegisterBootDriverCallback and IoUnRegisterBootDriverCallback from an Early Launch Anti-Malware driver, to receive notifications about the initialization of regular boot start drivers. The building and installation instructions given here apply to Windows® 8 and later operating systems. This sample driver is a minimal driver meant to demonstrate the usage of the APIs mentioned above. It is not intended for use in a production environment.



    "A programmer is just a tool which converts caffeine into code"

  • Friday, April 20, 2012 12:36 PM
     
     Answered
    ELAM can be implemented as either. 

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/