locked
ELAM in windows 8

    Question

  • Hi,

    Is ELAM (Early lunch Anti Malware) a Microsoft driver or a 3rd parity driver?

    thanks!

    Tuesday, March 27, 2012 3:49 AM

Answers

  • this is a demo driver from Microsoft:

    http://code.msdn.microsoft.com/windowshardware/ELAMSAMPLE-57962099

    Early Launch Anti-Malware Sample

    This sample demonstrates how to use the APIs IoRegisterBootDriverCallback and IoUnRegisterBootDriverCallback from an Early Launch Anti-Malware driver, to receive notifications about the initialization of regular boot start drivers. The building and installation instructions given here apply to Windows® 8 and later operating systems. This sample driver is a minimal driver meant to demonstrate the usage of the APIs mentioned above. It is not intended for use in a production environment.



    "A programmer is just a tool which converts caffeine into code"

    Tuesday, March 27, 2012 9:16 PM
  • ELAM can be implemented as either. 

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Friday, April 20, 2012 12:36 PM

All replies

  • this is a demo driver from Microsoft:

    http://code.msdn.microsoft.com/windowshardware/ELAMSAMPLE-57962099

    Early Launch Anti-Malware Sample

    This sample demonstrates how to use the APIs IoRegisterBootDriverCallback and IoUnRegisterBootDriverCallback from an Early Launch Anti-Malware driver, to receive notifications about the initialization of regular boot start drivers. The building and installation instructions given here apply to Windows® 8 and later operating systems. This sample driver is a minimal driver meant to demonstrate the usage of the APIs mentioned above. It is not intended for use in a production environment.



    "A programmer is just a tool which converts caffeine into code"

    Tuesday, March 27, 2012 9:16 PM
  • ELAM can be implemented as either. 

    --Joseph [MSFT] http://blogs.technet.com/b/joscon/

    Friday, April 20, 2012 12:36 PM