Comment by tejado

Kernel-Mode driver? Why not using Windows Filtering Platform (WFP)?