EaseFilter Process Filter Driver SDK - 5.1.8.1

Prevent the untrusted executable binaries ( malwares) from being launched, protect your data being damaged by the untrusted processes. It also enables your application to get the callback notification for the process/thread creation or temination

Download Now Buy Now

EaseFilter Process Filter Driver SDK Full Download Summary

Released:	03 / 05 / 2022
Price:	999
Type:	Shareware
Category:	Development::Components & Libraries
Install Support:	Install and Uninstall
Platform:	Windows
OS:	Win2000,WinXP,Win7 x32,Win7 x64,Windows 8,Windows 10,WinServer,WinOther,WinVista,WinVista x64
Limitations:	no limitation
Change Info:	1. Added trusted process to control the filter rule. 2. Fixed the slow issue of the service starting. 3. Enhanced the driver connection security check. 4. Fixed the issue which the user access rights not working correctly.
Size :	4.00 MB

Easefilter process filter driver is a kernel-mode driver that filters process/thread creation and termination, it provides you an easy way to develop Windows application for the Windows process monitoring and protection.
With the EaseFilter Process Filter Driver, it enables your application to prevent the untrusted executable binaries ( malwares) from being launched, protect your data being damaged by the untrusted processes.
It also enables your application to get the callback notification for the process/thread creation or termination, from the new process information you can get the parent process Id and thread Id of the new created process, you also can get the exact file name that is used to open the executable file and the command line that is used to execute the process if it is available.

To get the notification of the new process creation, enable the flag "PROCESS_CREATION_NOTIFICATION", if you want to get the notification of the process termination, enable the flag "PROCESS_TERMINATION_NOTIFICATION", if you want to get the notification of the process handle was created or duplicated, enable the flag "PROCESS_HANDLE_OP_NOTIFICATION", if you want to get the notification of the new thread creation, enable the flag "THREAD_CREATION_NOTIFICATION", if you want to get the notification of the thread termination, enable the flag "THREAD_TERMINIATION_NOTIFICATION", if you want to get the notification of the thread handle was created or duplicated, enable the flag "THREAD_HANDLE_OP_NOTIFICATION".

prevent the untrusted executable binaries ( malwares) from being launched, protect your data being damaged by the untrusted processes. It also enables your application to get the callback notification for the process/thread creation or temination, from the new process information you can get the parent process Id and thread Id of the new created process, you also can get the exact file name that is used to open the executable file and the command