When an I/O is issued on behalf of a system service call (for example NtReadFile, NtWriteFile, etc), the I/O manager creates a threaded IRP and then issues the I/O. I previously wrote about this. Today, Paul has returned as a guest writer and will talk
Read More...