logoalt Hacker News

p_ingyesterday at 7:16 PM2 repliesview on HN

No, it’s not NTFS, it’s the file system filter architecture of the NT kernel.


Replies

mattbeeyesterday at 9:12 PM

I had internalised that it was Windows Defender hooking every file operation and checking it against a blacklist? I've had it forced off for years.

zer0zzztoday at 8:51 AM

This guy gets it. Yes bingo. It's the VFS' filters/ACLs support afaik.