I was using NtOpenDirectoryObject -> NtQueryDirectoryObject (retrieving multiple records) for "\Driver" & "\Device" but it (1) doesn't return all entries I can see in Winobj and (2) the entries it returns are inconsistent across versions? Anyone have any insights?

-
Show this thread
-
-
Replying to @hFireF0X
I'm calling it with ReturnSingleEntry set to false to get all the results. Does that not work as expected?
2 replies 0 retweets 0 likes
or buffer size releated?
11:03 AM - 26 Feb 2020
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.