How to intercept read request from filesystem minifilter driver

how to read file data cached and non cached using filesystem minifilter driver and in which IRP have to intercept the read request to read the file data is it IRP_MJ_READ??
I want to encrypt the file when it is being read by the user using minifilter driver.

Please HELP in this regard!
Thank you

You should perform all data modification on the non-cached pathways. A
simple search in this forum will reveal thousands of threads referring
to the approaches used, problems hit and how to deal with them.

Pete


Kernel Drivers
Windows File System and Device Driver Consulting
www.KernelDrivers.com http:</http:>
866.263.9295

------ Original Message ------
From: xxxxx@outlook.com
To: “Windows File Systems Devs Interest List”
Sent: 4/1/2015 1:30:43 AM
Subject: [ntfsd] How to intercept read request from filesystem
minifilter driver

>how to read file data cached and non cached using filesystem minifilter
>driver and in which IRP have to intercept the read request to read the
>file data is it IRP_MJ_READ??
>I want to encrypt the file when it is being read by the user using
>minifilter driver.
>
>Please HELP in this regard!
>Thank you
>
>—
>NTFSD is sponsored by OSR
>
>OSR is hiring!! Info at http://www.osr.com/careers
>
>For our schedule of debugging and file system seminars visit:
>http://www.osr.com/seminars
>
>To unsubscribe, visit the List Server section of OSR Online at
>http://www.osronline.com/page.cfm?name=ListServer

I think first you need to brush up your basic skills about
windows minifilter driver.refer to msdn for that and wdk.

If you want to intercept read/write simply write callbacks for
them.have a look at swapbuffer sample in wdk give you basic knowledge.

for encryption you need to intercept Writes and for decryption need to
intercept read.

Hope this may help.