diff options
| author | Dave Wilson <[email protected]> | 2015-04-29 09:48:49 -0700 |
|---|---|---|
| committer | Dave Wilson <[email protected]> | 2015-04-29 10:47:29 -0700 |
| commit | d40232638faaab19de557e70a3ee938da7a35295 (patch) | |
| tree | 14e61c973745949af186b7940e3a53d25322f5de /security | |
| parent | 02e5b090a6131a7cc1b90f4a9373117c9e3c7088 (diff) | |
samples update for //build
Diffstat (limited to 'security')
| -rw-r--r-- | security/elam/elam.sln | 18 | ||||
| -rw-r--r-- | security/elam/elamsample.htm | 1110 | ||||
| -rw-r--r-- | security/elam/elamsample.vcxproj | 4 | ||||
| -rw-r--r-- | security/elam/elamsample.vcxproj.Filters | 8 |
4 files changed, 1125 insertions, 15 deletions
diff --git a/security/elam/elam.sln b/security/elam/elam.sln index 7e7fff34..53aa1f57 100644 --- a/security/elam/elam.sln +++ b/security/elam/elam.sln @@ -3,7 +3,7 @@ Microsoft Visual Studio Solution File, Format Version 12.00 # Visual Studio 2013 VisualStudioVersion = 12.0 MinimumVisualStudioVersion = 12.0 -Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "elamsample", "elamsample.vcxproj", "{C71588A8-91B3-4830-A8BC-EE0CADD1F74F}" +Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "elamsample", "elamsample.vcxproj", "{691F9AAE-40A3-4950-8529-1C817ED43A61}" EndProject Global GlobalSection(SolutionConfigurationPlatforms) = preSolution @@ -13,14 +13,14 @@ Global Release|x64 = Release|x64 EndGlobalSection GlobalSection(ProjectConfigurationPlatforms) = postSolution - {C71588A8-91B3-4830-A8BC-EE0CADD1F74F}.Debug|Win32.ActiveCfg = Debug|Win32 - {C71588A8-91B3-4830-A8BC-EE0CADD1F74F}.Debug|Win32.Build.0 = Debug|Win32 - {C71588A8-91B3-4830-A8BC-EE0CADD1F74F}.Release|Win32.ActiveCfg = Release|Win32 - {C71588A8-91B3-4830-A8BC-EE0CADD1F74F}.Release|Win32.Build.0 = Release|Win32 - {C71588A8-91B3-4830-A8BC-EE0CADD1F74F}.Debug|x64.ActiveCfg = Debug|x64 - {C71588A8-91B3-4830-A8BC-EE0CADD1F74F}.Debug|x64.Build.0 = Debug|x64 - {C71588A8-91B3-4830-A8BC-EE0CADD1F74F}.Release|x64.ActiveCfg = Release|x64 - {C71588A8-91B3-4830-A8BC-EE0CADD1F74F}.Release|x64.Build.0 = Release|x64 + {691F9AAE-40A3-4950-8529-1C817ED43A61}.Debug|Win32.ActiveCfg = Debug|Win32 + {691F9AAE-40A3-4950-8529-1C817ED43A61}.Debug|Win32.Build.0 = Debug|Win32 + {691F9AAE-40A3-4950-8529-1C817ED43A61}.Release|Win32.ActiveCfg = Release|Win32 + {691F9AAE-40A3-4950-8529-1C817ED43A61}.Release|Win32.Build.0 = Release|Win32 + {691F9AAE-40A3-4950-8529-1C817ED43A61}.Debug|x64.ActiveCfg = Debug|x64 + {691F9AAE-40A3-4950-8529-1C817ED43A61}.Debug|x64.Build.0 = Debug|x64 + {691F9AAE-40A3-4950-8529-1C817ED43A61}.Release|x64.ActiveCfg = Release|x64 + {691F9AAE-40A3-4950-8529-1C817ED43A61}.Release|x64.Build.0 = Release|x64 EndGlobalSection GlobalSection(SolutionProperties) = preSolution HideSolutionNode = FALSE diff --git a/security/elam/elamsample.htm b/security/elam/elamsample.htm new file mode 100644 index 00000000..2c93d624 --- /dev/null +++ b/security/elam/elamsample.htm @@ -0,0 +1,1110 @@ +<html xmlns:v="urn:schemas-microsoft-com:vml" +xmlns:o="urn:schemas-microsoft-com:office:office" +xmlns:w="urn:schemas-microsoft-com:office:word" +xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" +xmlns="http://www.w3.org/TR/REC-html40"> + +<head> +<meta http-equiv=Content-Type content="text/html; charset=windows-1252"> +<meta name=ProgId content=Word.Document> +<meta name=Generator content="Microsoft Word 14"> +<meta name=Originator content="Microsoft Word 14"> +<link rel=File-List href="elamsample_files/filelist.xml"> +<!--[if gte mso 9]><xml> + <o:OfficeDocumentSettings> + <o:RemovePersonalInformation/> + <o:RemoveDateAndTime/> + </o:OfficeDocumentSettings> +</xml><![endif]--> +<link rel=themeData href="elamsample_files/themedata.thmx"> +<link rel=colorSchemeMapping href="elamsample_files/colorschememapping.xml"> +<!--[if gte mso 9]><xml> + <w:WordDocument> + <w:Zoom>BestFit</w:Zoom> + <w:SpellingState>Clean</w:SpellingState> + <w:GrammarState>Clean</w:GrammarState> + <w:TrackMoves>false</w:TrackMoves> + <w:TrackFormatting/> + <w:ValidateAgainstSchemas/> + <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid> + <w:IgnoreMixedContent>false</w:IgnoreMixedContent> + <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText> + <w:DoNotPromoteQF/> + <w:LidThemeOther>EN-US</w:LidThemeOther> + <w:LidThemeAsian>X-NONE</w:LidThemeAsian> + <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript> + <w:Compatibility> + <w:BreakWrappedTables/> + <w:SnapToGridInCell/> + <w:WrapTextWithPunct/> + <w:UseAsianBreakRules/> + <w:DontGrowAutofit/> + <w:SplitPgBreakAndParaMark/> + <w:DontVertAlignCellWithSp/> + <w:DontBreakConstrainedForcedTables/> + <w:DontVertAlignInTxbx/> + <w:Word11KerningPairs/> + <w:CachedColBalance/> + </w:Compatibility> + <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> + <m:mathPr> + <m:mathFont m:val="Cambria Math"/> + <m:brkBin m:val="before"/> + <m:brkBinSub m:val="--"/> + <m:smallFrac m:val="off"/> + <m:dispDef/> + <m:lMargin m:val="0"/> + <m:rMargin m:val="0"/> + <m:defJc m:val="centerGroup"/> + <m:wrapIndent m:val="1440"/> + <m:intLim m:val="subSup"/> + <m:naryLim m:val="undOvr"/> + </m:mathPr></w:WordDocument> +</xml><![endif]--><!--[if gte mso 9]><xml> + <w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true" + DefSemiHidden="true" DefQFormat="false" DefPriority="99" + LatentStyleCount="267"> + <w:LsdException Locked="false" Priority="0" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Normal"/> + <w:LsdException Locked="false" Priority="9" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="heading 1"/> + <w:LsdException Locked="false" Priority="9" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="heading 2"/> + <w:LsdException Locked="false" Priority="9" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="heading 3"/> + <w:LsdException Locked="false" Priority="9" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="heading 4"/> + <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/> + <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/> + <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/> + <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/> + <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/> + <w:LsdException Locked="false" Priority="39" Name="toc 1"/> + <w:LsdException Locked="false" Priority="39" Name="toc 2"/> + <w:LsdException Locked="false" Priority="39" Name="toc 3"/> + <w:LsdException Locked="false" Priority="39" Name="toc 4"/> + <w:LsdException Locked="false" Priority="39" Name="toc 5"/> + <w:LsdException Locked="false" Priority="39" Name="toc 6"/> + <w:LsdException Locked="false" Priority="39" Name="toc 7"/> + <w:LsdException Locked="false" Priority="39" Name="toc 8"/> + <w:LsdException Locked="false" Priority="39" Name="toc 9"/> + <w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/> + <w:LsdException Locked="false" Priority="10" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Title"/> + <w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/> + <w:LsdException Locked="false" Priority="11" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/> + <w:LsdException Locked="false" Priority="22" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Strong"/> + <w:LsdException Locked="false" Priority="20" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/> + <w:LsdException Locked="false" Priority="59" SemiHidden="false" + UnhideWhenUsed="false" Name="Table Grid"/> + <w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/> + <w:LsdException Locked="false" Priority="1" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/> + <w:LsdException Locked="false" Priority="60" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Shading"/> + <w:LsdException Locked="false" Priority="61" SemiHidden="false" + UnhideWhenUsed="false" Name="Light List"/> + <w:LsdException Locked="false" Priority="62" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Grid"/> + <w:LsdException Locked="false" Priority="63" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 1"/> + <w:LsdException Locked="false" Priority="64" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 2"/> + <w:LsdException Locked="false" Priority="65" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 1"/> + <w:LsdException Locked="false" Priority="66" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 2"/> + <w:LsdException Locked="false" Priority="67" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 1"/> + <w:LsdException Locked="false" Priority="68" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 2"/> + <w:LsdException Locked="false" Priority="69" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 3"/> + <w:LsdException Locked="false" Priority="70" SemiHidden="false" + UnhideWhenUsed="false" Name="Dark List"/> + <w:LsdException Locked="false" Priority="71" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Shading"/> + <w:LsdException Locked="false" Priority="72" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful List"/> + <w:LsdException Locked="false" Priority="73" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Grid"/> + <w:LsdException Locked="false" Priority="60" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Shading Accent 1"/> + <w:LsdException Locked="false" Priority="61" SemiHidden="false" + UnhideWhenUsed="false" Name="Light List Accent 1"/> + <w:LsdException Locked="false" Priority="62" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Grid Accent 1"/> + <w:LsdException Locked="false" Priority="63" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/> + <w:LsdException Locked="false" Priority="64" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/> + <w:LsdException Locked="false" Priority="65" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/> + <w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/> + <w:LsdException Locked="false" Priority="34" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/> + <w:LsdException Locked="false" Priority="29" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Quote"/> + <w:LsdException Locked="false" Priority="30" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/> + <w:LsdException Locked="false" Priority="66" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/> + <w:LsdException Locked="false" Priority="67" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/> + <w:LsdException Locked="false" Priority="68" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/> + <w:LsdException Locked="false" Priority="69" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/> + <w:LsdException Locked="false" Priority="70" SemiHidden="false" + UnhideWhenUsed="false" Name="Dark List Accent 1"/> + <w:LsdException Locked="false" Priority="71" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/> + <w:LsdException Locked="false" Priority="72" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful List Accent 1"/> + <w:LsdException Locked="false" Priority="73" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/> + <w:LsdException Locked="false" Priority="60" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Shading Accent 2"/> + <w:LsdException Locked="false" Priority="61" SemiHidden="false" + UnhideWhenUsed="false" Name="Light List Accent 2"/> + <w:LsdException Locked="false" Priority="62" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Grid Accent 2"/> + <w:LsdException Locked="false" Priority="63" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/> + <w:LsdException Locked="false" Priority="64" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/> + <w:LsdException Locked="false" Priority="65" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/> + <w:LsdException Locked="false" Priority="66" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/> + <w:LsdException Locked="false" Priority="67" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/> + <w:LsdException Locked="false" Priority="68" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/> + <w:LsdException Locked="false" Priority="69" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/> + <w:LsdException Locked="false" Priority="70" SemiHidden="false" + UnhideWhenUsed="false" Name="Dark List Accent 2"/> + <w:LsdException Locked="false" Priority="71" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/> + <w:LsdException Locked="false" Priority="72" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful List Accent 2"/> + <w:LsdException Locked="false" Priority="73" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/> + <w:LsdException Locked="false" Priority="60" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Shading Accent 3"/> + <w:LsdException Locked="false" Priority="61" SemiHidden="false" + UnhideWhenUsed="false" Name="Light List Accent 3"/> + <w:LsdException Locked="false" Priority="62" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Grid Accent 3"/> + <w:LsdException Locked="false" Priority="63" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/> + <w:LsdException Locked="false" Priority="64" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/> + <w:LsdException Locked="false" Priority="65" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/> + <w:LsdException Locked="false" Priority="66" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/> + <w:LsdException Locked="false" Priority="67" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/> + <w:LsdException Locked="false" Priority="68" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/> + <w:LsdException Locked="false" Priority="69" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/> + <w:LsdException Locked="false" Priority="70" SemiHidden="false" + UnhideWhenUsed="false" Name="Dark List Accent 3"/> + <w:LsdException Locked="false" Priority="71" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/> + <w:LsdException Locked="false" Priority="72" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful List Accent 3"/> + <w:LsdException Locked="false" Priority="73" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/> + <w:LsdException Locked="false" Priority="60" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Shading Accent 4"/> + <w:LsdException Locked="false" Priority="61" SemiHidden="false" + UnhideWhenUsed="false" Name="Light List Accent 4"/> + <w:LsdException Locked="false" Priority="62" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Grid Accent 4"/> + <w:LsdException Locked="false" Priority="63" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/> + <w:LsdException Locked="false" Priority="64" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/> + <w:LsdException Locked="false" Priority="65" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/> + <w:LsdException Locked="false" Priority="66" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/> + <w:LsdException Locked="false" Priority="67" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/> + <w:LsdException Locked="false" Priority="68" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/> + <w:LsdException Locked="false" Priority="69" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/> + <w:LsdException Locked="false" Priority="70" SemiHidden="false" + UnhideWhenUsed="false" Name="Dark List Accent 4"/> + <w:LsdException Locked="false" Priority="71" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/> + <w:LsdException Locked="false" Priority="72" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful List Accent 4"/> + <w:LsdException Locked="false" Priority="73" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/> + <w:LsdException Locked="false" Priority="60" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Shading Accent 5"/> + <w:LsdException Locked="false" Priority="61" SemiHidden="false" + UnhideWhenUsed="false" Name="Light List Accent 5"/> + <w:LsdException Locked="false" Priority="62" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Grid Accent 5"/> + <w:LsdException Locked="false" Priority="63" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/> + <w:LsdException Locked="false" Priority="64" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/> + <w:LsdException Locked="false" Priority="65" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/> + <w:LsdException Locked="false" Priority="66" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/> + <w:LsdException Locked="false" Priority="67" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/> + <w:LsdException Locked="false" Priority="68" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/> + <w:LsdException Locked="false" Priority="69" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/> + <w:LsdException Locked="false" Priority="70" SemiHidden="false" + UnhideWhenUsed="false" Name="Dark List Accent 5"/> + <w:LsdException Locked="false" Priority="71" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/> + <w:LsdException Locked="false" Priority="72" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful List Accent 5"/> + <w:LsdException Locked="false" Priority="73" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/> + <w:LsdException Locked="false" Priority="60" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Shading Accent 6"/> + <w:LsdException Locked="false" Priority="61" SemiHidden="false" + UnhideWhenUsed="false" Name="Light List Accent 6"/> + <w:LsdException Locked="false" Priority="62" SemiHidden="false" + UnhideWhenUsed="false" Name="Light Grid Accent 6"/> + <w:LsdException Locked="false" Priority="63" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/> + <w:LsdException Locked="false" Priority="64" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/> + <w:LsdException Locked="false" Priority="65" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/> + <w:LsdException Locked="false" Priority="66" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/> + <w:LsdException Locked="false" Priority="67" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/> + <w:LsdException Locked="false" Priority="68" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/> + <w:LsdException Locked="false" Priority="69" SemiHidden="false" + UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/> + <w:LsdException Locked="false" Priority="70" SemiHidden="false" + UnhideWhenUsed="false" Name="Dark List Accent 6"/> + <w:LsdException Locked="false" Priority="71" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/> + <w:LsdException Locked="false" Priority="72" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful List Accent 6"/> + <w:LsdException Locked="false" Priority="73" SemiHidden="false" + UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/> + <w:LsdException Locked="false" Priority="19" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/> + <w:LsdException Locked="false" Priority="21" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/> + <w:LsdException Locked="false" Priority="31" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/> + <w:LsdException Locked="false" Priority="32" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/> + <w:LsdException Locked="false" Priority="33" SemiHidden="false" + UnhideWhenUsed="false" QFormat="true" Name="Book Title"/> + <w:LsdException Locked="false" Priority="37" Name="Bibliography"/> + <w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/> + </w:LatentStyles> +</xml><![endif]--> +<style> +<!-- + /* Font Definitions */ + @font-face + {font-family:Tahoma; + panose-1:2 11 6 4 3 5 4 4 2 4; + mso-font-charset:0; + mso-generic-font-family:swiss; + mso-font-pitch:variable; + mso-font-signature:-520081665 -1073717157 41 0 66047 0;} +@font-face + {font-family:Verdana; + panose-1:2 11 6 4 3 5 4 4 2 4; + mso-font-charset:0; + mso-generic-font-family:swiss; + mso-font-pitch:variable; + mso-font-signature:-1593833729 1073750107 16 0 415 0;} +@font-face + {font-family:Consolas; + panose-1:2 11 6 9 2 2 4 3 2 4; + mso-font-charset:0; + mso-generic-font-family:modern; + mso-font-pitch:fixed; + mso-font-signature:-520092929 1073806591 9 0 415 0;} +@font-face + {font-family:"MS Sans Serif"; + panose-1:0 0 0 0 0 0 0 0 0 0; + mso-font-alt:"Times New Roman"; + mso-font-charset:0; + mso-generic-font-family:roman; + mso-font-format:other; + mso-font-pitch:auto; + mso-font-signature:0 0 0 0 0 0;} + /* Style Definitions */ + p.MsoNormal, li.MsoNormal, div.MsoNormal + {mso-style-unhide:no; + mso-style-qformat:yes; + mso-style-parent:""; + margin:0in; + margin-bottom:.0001pt; + mso-pagination:widow-orphan; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +h2 + {mso-style-priority:9; + mso-style-unhide:no; + mso-style-qformat:yes; + mso-style-link:"Heading 2 Char"; + mso-margin-top-alt:auto; + margin-right:0in; + mso-margin-bottom-alt:auto; + margin-left:0in; + mso-pagination:widow-orphan; + mso-outline-level:2; + font-size:18.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + mso-fareast-theme-font:minor-fareast; + color:black; + font-weight:bold;} +h3 + {mso-style-priority:9; + mso-style-unhide:no; + mso-style-qformat:yes; + mso-style-link:"Heading 3 Char"; + mso-margin-top-alt:auto; + margin-right:0in; + mso-margin-bottom-alt:auto; + margin-left:0in; + mso-pagination:widow-orphan; + mso-outline-level:3; + font-size:13.5pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + mso-fareast-theme-font:minor-fareast; + color:black; + font-weight:bold;} +h4 + {mso-style-priority:9; + mso-style-unhide:no; + mso-style-qformat:yes; + mso-style-link:"Heading 4 Char"; + mso-margin-top-alt:auto; + margin-right:0in; + mso-margin-bottom-alt:auto; + margin-left:0in; + mso-pagination:widow-orphan; + mso-outline-level:4; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + mso-fareast-theme-font:minor-fareast; + color:black; + font-weight:bold;} +p.MsoHeader, li.MsoHeader, div.MsoHeader + {mso-style-noshow:yes; + mso-style-priority:99; + mso-style-link:"Header Char"; + margin:0in; + margin-bottom:.0001pt; + mso-pagination:widow-orphan; + tab-stops:center 3.25in right 6.5in; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +p.MsoFooter, li.MsoFooter, div.MsoFooter + {mso-style-noshow:yes; + mso-style-priority:99; + mso-style-link:"Footer Char"; + margin:0in; + margin-bottom:.0001pt; + mso-pagination:widow-orphan; + tab-stops:center 3.25in right 6.5in; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +a:link, span.MsoHyperlink + {mso-style-noshow:yes; + mso-style-priority:99; + color:blue; + text-decoration:underline; + text-underline:single;} +a:visited, span.MsoHyperlinkFollowed + {mso-style-noshow:yes; + mso-style-priority:99; + color:purple; + text-decoration:underline; + text-underline:single;} +p + {mso-style-noshow:yes; + mso-style-priority:99; + mso-margin-top-alt:auto; + margin-right:0in; + mso-margin-bottom-alt:auto; + margin-left:0in; + mso-pagination:widow-orphan; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +pre + {mso-style-noshow:yes; + mso-style-priority:99; + mso-style-link:"HTML Preformatted Char"; + margin:0in; + margin-bottom:.0001pt; + mso-pagination:widow-orphan; + tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt; + font-size:10.0pt; + font-family:"Courier New"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +p.MsoAcetate, li.MsoAcetate, div.MsoAcetate + {mso-style-noshow:yes; + mso-style-priority:99; + mso-style-link:"Balloon Text Char"; + margin:0in; + margin-bottom:.0001pt; + mso-pagination:widow-orphan; + font-size:8.0pt; + font-family:"Tahoma","sans-serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph + {mso-style-noshow:yes; + mso-style-priority:34; + mso-style-unhide:no; + mso-style-qformat:yes; + margin-top:0in; + margin-right:0in; + margin-bottom:0in; + margin-left:.5in; + margin-bottom:.0001pt; + mso-add-space:auto; + mso-pagination:widow-orphan; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst + {mso-style-noshow:yes; + mso-style-priority:34; + mso-style-unhide:no; + mso-style-qformat:yes; + mso-style-type:export-only; + margin-top:0in; + margin-right:0in; + margin-bottom:0in; + margin-left:.5in; + margin-bottom:.0001pt; + mso-add-space:auto; + mso-pagination:widow-orphan; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle + {mso-style-noshow:yes; + mso-style-priority:34; + mso-style-unhide:no; + mso-style-qformat:yes; + mso-style-type:export-only; + margin-top:0in; + margin-right:0in; + margin-bottom:0in; + margin-left:.5in; + margin-bottom:.0001pt; + mso-add-space:auto; + mso-pagination:widow-orphan; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast + {mso-style-noshow:yes; + mso-style-priority:34; + mso-style-unhide:no; + mso-style-qformat:yes; + mso-style-type:export-only; + margin-top:0in; + margin-right:0in; + margin-bottom:0in; + margin-left:.5in; + margin-bottom:.0001pt; + mso-add-space:auto; + mso-pagination:widow-orphan; + font-size:12.0pt; + font-family:"Times New Roman","serif"; + mso-fareast-font-family:"Times New Roman"; + color:black;} +span.Heading2Char + {mso-style-name:"Heading 2 Char"; + mso-style-noshow:yes; + mso-style-priority:9; + mso-style-unhide:no; + mso-style-locked:yes; + mso-style-link:"Heading 2"; + mso-ansi-font-size:13.0pt; + mso-bidi-font-size:13.0pt; + font-family:"Cambria","serif"; + mso-ascii-font-family:Cambria; + mso-ascii-theme-font:major-latin; + mso-fareast-font-family:"Times New Roman"; + mso-fareast-theme-font:major-fareast; + mso-hansi-font-family:Cambria; + mso-hansi-theme-font:major-latin; + mso-bidi-font-family:"Times New Roman"; + mso-bidi-theme-font:major-bidi; + color:#4F81BD; + mso-themecolor:accent1; + font-weight:bold;} +span.Heading3Char + {mso-style-name:"Heading 3 Char"; + mso-style-noshow:yes; + mso-style-priority:9; + mso-style-unhide:no; + mso-style-locked:yes; + mso-style-link:"Heading 3"; + mso-ansi-font-size:12.0pt; + mso-bidi-font-size:12.0pt; + font-family:"Cambria","serif"; + mso-ascii-font-family:Cambria; + mso-ascii-theme-font:major-latin; + mso-fareast-font-family:"Times New Roman"; + mso-fareast-theme-font:major-fareast; + mso-hansi-font-family:Cambria; + mso-hansi-theme-font:major-latin; + mso-bidi-font-family:"Times New Roman"; + mso-bidi-theme-font:major-bidi; + color:#4F81BD; + mso-themecolor:accent1; + font-weight:bold;} +span.Heading4Char + {mso-style-name:"Heading 4 Char"; + mso-style-noshow:yes; + mso-style-priority:9; + mso-style-unhide:no; + mso-style-locked:yes; + mso-style-link:"Heading 4"; + mso-ansi-font-size:12.0pt; + mso-bidi-font-size:12.0pt; + font-family:"Cambria","serif"; + mso-ascii-font-family:Cambria; + mso-ascii-theme-font:major-latin; + mso-fareast-font-family:"Times New Roman"; + mso-fareast-theme-font:major-fareast; + mso-hansi-font-family:Cambria; + mso-hansi-theme-font:major-latin; + mso-bidi-font-family:"Times New Roman"; + mso-bidi-theme-font:major-bidi; + color:#4F81BD; + mso-themecolor:accent1; + font-weight:bold; + font-style:italic;} +span.HTMLPreformattedChar + {mso-style-name:"HTML Preformatted Char"; + mso-style-noshow:yes; + mso-style-priority:99; + mso-style-unhide:no; + mso-style-locked:yes; + mso-style-link:"HTML Preformatted"; + font-family:Consolas; + mso-ascii-font-family:Consolas; + mso-hansi-font-family:Consolas; + mso-bidi-font-family:Consolas; + color:black;} +span.HeaderChar + {mso-style-name:"Header Char"; + mso-style-noshow:yes; + mso-style-priority:99; + mso-style-unhide:no; + mso-style-locked:yes; + mso-style-link:Header; + mso-ansi-font-size:12.0pt; + mso-bidi-font-size:12.0pt; + color:black;} +span.FooterChar + {mso-style-name:"Footer Char"; + mso-style-noshow:yes; + mso-style-priority:99; + mso-style-unhide:no; + mso-style-locked:yes; + mso-style-link:Footer; + mso-ansi-font-size:12.0pt; + mso-bidi-font-size:12.0pt; + color:black;} +span.BalloonTextChar + {mso-style-name:"Balloon Text Char"; + mso-style-noshow:yes; + mso-style-priority:99; + mso-style-unhide:no; + mso-style-locked:yes; + mso-style-link:"Balloon Text"; + mso-ansi-font-size:8.0pt; + mso-bidi-font-size:8.0pt; + font-family:"Tahoma","sans-serif"; + mso-ascii-font-family:Tahoma; + mso-hansi-font-family:Tahoma; + mso-bidi-font-family:Tahoma; + color:black;} +span.SpellE + {mso-style-name:""; + mso-spl-e:yes;} +span.GramE + {mso-style-name:""; + mso-gram-e:yes;} +.MsoChpDefault + {mso-style-type:export-only; + mso-default-props:yes; + font-size:10.0pt; + mso-ansi-font-size:10.0pt; + mso-bidi-font-size:10.0pt;} +@page WordSection1 + {size:8.5in 11.0in; + margin:1.0in 1.25in 1.0in 1.25in; + mso-header-margin:.5in; + mso-footer-margin:.5in; + mso-paper-source:0;} +div.WordSection1 + {page:WordSection1;} + /* List Definitions */ + @list l0 + {mso-list-id:710498570; + mso-list-type:hybrid; + mso-list-template-ids:-349016190 1376668688 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;} +@list l0:level1 + {mso-level-tab-stop:none; + mso-level-number-position:left; + text-indent:-.25in; + mso-ansi-font-size:10.0pt; + font-family:"Verdana","sans-serif"; + mso-ansi-font-weight:normal;} +@list l0:level2 + {mso-level-tab-stop:1.0in; + mso-level-number-position:left; + text-indent:-.25in;} +@list l0:level3 + {mso-level-tab-stop:1.5in; + mso-level-number-position:left; + text-indent:-.25in;} +@list l0:level4 + {mso-level-tab-stop:2.0in; + mso-level-number-position:left; + text-indent:-.25in;} +@list l0:level5 + {mso-level-tab-stop:2.5in; + mso-level-number-position:left; + text-indent:-.25in;} +@list l0:level6 + {mso-level-tab-stop:3.0in; + mso-level-number-position:left; + text-indent:-.25in;} +@list l0:level7 + {mso-level-tab-stop:3.5in; + mso-level-number-position:left; + text-indent:-.25in;} +@list l0:level8 + {mso-level-tab-stop:4.0in; + mso-level-number-position:left; + text-indent:-.25in;} +@list l0:level9 + {mso-level-tab-stop:4.5in; + mso-level-number-position:left; + text-indent:-.25in;} +ol + {margin-bottom:0in;} +ul + {margin-bottom:0in;} +--> +</style> +<!--[if gte mso 10]> +<style> + /* Style Definitions */ + table.MsoNormalTable + {mso-style-name:"Table Normal"; + mso-tstyle-rowband-size:0; + mso-tstyle-colband-size:0; + mso-style-noshow:yes; + mso-style-priority:99; + mso-style-parent:""; + mso-padding-alt:0in 5.4pt 0in 5.4pt; + mso-para-margin:0in; + mso-para-margin-bottom:.0001pt; + mso-pagination:widow-orphan; + font-size:10.0pt; + font-family:"Times New Roman","serif";} +</style> +<![endif]--> +<meta name=Template content="C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\html.dot"> +<!--[if gte mso 9]><xml> + <o:shapedefaults v:ext="edit" spidmax="1026"/> +</xml><![endif]--><!--[if gte mso 9]><xml> + <o:shapelayout v:ext="edit"> + <o:idmap v:ext="edit" data="1"/> + </o:shapelayout></xml><![endif]--> +</head> + +<body bgcolor=white lang=EN-US link=blue vlink=purple style='tab-interval:.5in' +leftmargin=8> + +<div class=WordSection1> + +<h2><a name=MYSAMPLE><span style='font-family:"Verdana","sans-serif"; +mso-fareast-font-family:"Times New Roman"'>E</span></a><span style='font-family: +"Verdana","sans-serif";mso-fareast-font-family:"Times New Roman"'>LAMSAMPLE <o:p></o:p></span></h2> + +<h3><span style='font-family:"Verdana","sans-serif";mso-fareast-font-family: +"Times New Roman"'>SUMMARY<o:p></o:p></span></h3> + +<p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>This +sample demonstrates how to use the APIs <span class=SpellE>IoRegisterBootDriverCallback</span> +and <span class=SpellE>IoUnRegisterBootDriverCallback</span> from an Early +Launch Anti-Malware driver, to receive notifications about the initialization +of regular boot start drivers</span></p> + +<p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>The +building and installation instructions given here apply to Windows� 8 and later +operating systems.<o:p></o:p></span></p> + +<p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>This +sample driver is a minimal driver meant to demonstrate the usage of the APIs +mentioned above. It is not intended for use in a production environment. <o:p></o:p></span></p> + +<h3><span style='font-family:"Verdana","sans-serif";mso-fareast-font-family: +"Times New Roman"'>BUILDING THE SAMPLE<o:p></o:p></span></h3> + +<p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Click the +Free Build Environment or Checked Build Environment icon under Development Kits +program group to set basic environment variables. <o:p></o:p></span></p> + +<p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Change to +the directory containing the device source code, such as �<span class=SpellE>src</span>\security\<span +class=SpellE>elam</span>�. <o:p></o:p></span></p> + +<p><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Run <b>build +-<span class=SpellE>ceZ</span>,</b> or use the macro <b>BLD</b>. This command +invokes the Microsoft make routines to build the components. If the build </span>s<span +style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>ucceeds, you will +find the driver, elamsample.sys, in the binary output directory specified for +the build environment. You can get the output path from the buildxxx.log file. +If it fails you can find errors and warnings in the <span class=SpellE>buildxxx.err</span> +and <span class=SpellE>buildxxx.wrn</span> respectively.<o:p></o:p></span></p> + +<h3><span style='font-family:"Verdana","sans-serif";mso-fareast-font-family: +"Times New Roman"'>SIGNING THE SAMPLE<o:p></o:p></span></h3> + +<p class=MsoNormal style='mso-layout-grid-align:none;text-autospace:none'><span +style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Early Launch +drivers are required to be signed with a code-signing certificate that also +contains the Early Launch EKU </span><span style='font-size:10.0pt;font-family: +"Verdana","sans-serif";mso-bidi-font-family:Consolas;color:windowtext'>"1.3.6.1.4.1.311.61.4.1". +In a production environment, Early Launch drivers are signed by Microsoft for +qualifying Anti-Malware vendors with a WHQL certificate that contains this EKU. +The makecert.exe tool can be used to generate a self-signed test certificate +that contains both the Early Launch EKU and the �1.3.6.1.5.5.7.3.3� Code +Signing EKU. Once a certificate of this form has been created, signtool.exe can +be used to sign elamsample.sys.<o:p></o:p></span></p> + +<h3><span style='font-family:"Verdana","sans-serif";mso-fareast-font-family: +"Times New Roman"'>INSTALLATION<o:p></o:p></span></h3> + +<p style='margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span +style='font-size:10.0pt;mso-bidi-font-size:12.0pt;font-family:"Verdana","sans-serif"; +mso-fareast-font-family:Verdana;mso-bidi-font-family:Verdana'><span +style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> +</span></span></span><![endif]><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Copy +the signed elamsample.sys file to the %WINDIR%\System32\Drivers directory on +your test machine. </span></p> + +<p style='margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo2'><![if !supportLists]><span +style='font-size:10.0pt;mso-bidi-font-size:12.0pt;font-family:"Verdana","sans-serif"; +mso-fareast-font-family:Verdana;mso-bidi-font-family:Verdana'><span +style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> +</span></span></span><![endif]><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Use +the sc.exe tool present in Windows to install the driver:</span></p> + +<blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><pre><span +class=SpellE><span class=GramE><span style='font-family:Consolas'>sc</span></span></span><span +style='font-family:Consolas'> create <span class=SpellE>ElamSample</span> <span +class=SpellE>binpath</span>=%<span class=SpellE>windir</span>%\system32\drivers\elamsample.sys type=kernel start=boot error=critical group=Early-Launch<o:p></o:p></span></pre><pre><o:p> </o:p></pre></blockquote> + +<p class=MsoListParagraphCxSpFirst style='text-indent:-.25in;mso-list:l0 level1 lfo2; +tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><![if !supportLists]><span +style='font-size:10.0pt;mso-bidi-font-size:12.0pt;font-family:"Verdana","sans-serif"; +mso-fareast-font-family:Verdana;mso-bidi-font-family:Verdana'><span +style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> +</span></span></span><![endif]><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Enable +test signing:</span><span style='font-family:"Verdana","sans-serif"'><o:p></o:p></span></p> + +<p class=MsoListParagraphCxSpMiddle style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +style='font-family:"Verdana","sans-serif"'><o:p> </o:p></span></p> + +<p class=MsoListParagraphCxSpLast style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +class=SpellE><span class=GramE><span style='font-size:10.0pt;font-family:Consolas'>bcdedit</span></span></span><span +style='font-size:10.0pt;font-family:Consolas'> /set <span class=SpellE>testsigning</span> +on<o:p></o:p></span></p> + +<h3 style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +style='font-family:"Verdana","sans-serif";mso-fareast-font-family:"Times New Roman"'>CODE +TOUR</span><span style='mso-fareast-font-family:"Times New Roman"'><o:p></o:p></span></h3> + +<p style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +class=SpellE><u>DriverEntry</u></span> - Creates a framework driver object and +calls <span class=SpellE><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>IoRegisterBootDriverCallback</span></span><span +style='font-size:10.0pt;font-family:"Verdana","sans-serif"'> to register to +boot driver status callbacks.</span></p> + +<p style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +class=SpellE><u>ElamSampleEvtDriverUnload</u></span>: Calls <span class=SpellE>IoUnregisterBootDriverCallback</span> +to unregister for callbacks when elamsample.sys is about to be unloaded.</p> + +<p style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +class=SpellE><u>ElamSampleBootDriverCallback</u></span>: Dispatches to other +functions to process the specific callback types.</p> + +<p style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +class=SpellE><u>ElamSampleProcessStatusUpdate</u></span>: Displays callback <span +class=SpellE>BdCbStatusUpdate</span> information, such as when dependencies and +drivers are about to be initialized, or when the ELAM driver is about to be +unload.</p> + +<p style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +class=SpellE><u>ElamSampleProcessInitializeImage</u></span>: Displays callback <span +class=SpellE>BdCbInitializeImage</span> information, such as the driver image +name and the name of the entity that signed the driver.</p> + +<p style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +class=SpellE><u>ElamSamplePrintHex</u></span>: A utility function to display a +buffer in hexadecimal form.<o:p></o:p></p> + +<h3 style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +style='font-family:"Verdana","sans-serif";mso-fareast-font-family:"Times New Roman"'>TESTING<o:p></o:p></span></h3> + +<h3 style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +style='font-size:10.0pt;font-family:"Verdana","sans-serif";font-weight:normal; +mso-bidi-font-weight:bold'>After installing the driver, attach the Kernel +Debugger and reboot your test machine. If ELAMSAMPLE_TRACE_LEVEL is set to DPFLTR_ERROR_LEVEL, +traces will be output to the debugger automatically. For example:<o:p></o:p></span></h3> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'> is being initialized.<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'> reports the following dependency is about to be initialized:<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image name "\<span +class=SpellE>FileSystem</span>\RAW"<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Not signed.<o:p></o:p></span></p> + +<p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'> reports that Boot Start driver dependencies are being initialized.<o:p></o:p></span></p> + +<p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'> reports the following dependency is about to be initialized:<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image name "\<span +class=SpellE>SystemRoot</span>\system32\PSHED.dll"<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image hash algorithm = +0x0000800c.<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image hash:<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>21 29 88 <span +class=SpellE>ca</span> 88 <span class=SpellE>ab</span> dc 0f c3 f1 c0 74 <span +class=SpellE><span class=GramE>df</span></span> e0 29 58 <o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>2e cd 41 5e 56 <span +class=SpellE>bd</span> 77 53 39 9b d9 d7 f4 47 65 d8 <o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image is signed by +"Microsoft Windows".<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Certificate issued by +"MSIT Test <span class=SpellE>CodeSign</span> CA 3".<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Certificate thumb print +algorithm = 0x0000800c.<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Certificate thumb print:<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>93 29 d5 f2 e2 7a c9 79 41 +b2 6d c0 78 35 2a d3 <o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>da 2d 7e 72 f0 05 5f 8b 63 +8c 7b a2 6b 37 5c 4f<b style='mso-bidi-font-weight:normal'><o:p></o:p></b></span></p> + +<p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'> reports that Boot Start drivers are about to be initialized.<o:p></o:p></span></p> + +<p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'> reports the following Boot Start driver is about to be initialized:<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image name "\<span +class=SpellE>SystemRoot</span>\System32\drivers\rdyboost.sys"<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Registry path +"\Registry\Machine\System\<span class=SpellE>CurrentControlSet</span>\Services\<span +class=SpellE>rdyboost</span>"<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image hash algorithm = +0x0000800c.<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image hash:<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>9e 91 b2 e1 29 97 <span +class=SpellE><span class=GramE>af</span></span> e9 ac 6c 48 24 01 43 c8 b4 <o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>f6 81 bf 57 <span +class=SpellE><span class=GramE>df</span></span> 80 0b 05 4d 58 bb e6 d9 83 a9 +08 <o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Image is signed by +"Microsoft Windows".<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Certificate issued by +"MSIT Test <span class=SpellE>CodeSign</span> CA 3".<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Certificate thumb print +algorithm = 0x0000800c.<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>Certificate thumb print:<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>93 29 d5 f2 e2 7a c9 79 41 +b2 6d c0 78 35 2a d3 <o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'>:<span style='mso-spacerun:yes'>��� </span>da 2d 7e 72 f0 05 5f 8b 63 +8c 7b a2 6b 37 5c 4f <o:p></o:p></span></p> + +<p class=MsoNormal><span style='font-size:10.0pt;font-family:Consolas'><o:p> </o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'> reports that all Boot Start drivers have been initialized and that <span +class=SpellE>ElamSample</span> is about to be unloaded<o:p></o:p></span></p> + +<p class=MsoNormal><span class=SpellE><span style='font-size:10.0pt;font-family: +Consolas'>ElamSample</span></span><span style='font-size:10.0pt;font-family: +Consolas'> is being unloaded.</span><b style='mso-bidi-font-weight:normal'><o:p></o:p></b></p> + +<h4 style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +style='font-size:13.5pt;font-family:"Verdana","sans-serif";mso-fareast-font-family: +"Times New Roman"'>File Manifest<o:p></o:p></span></h4> + +<pre><u>File<span style='mso-tab-count:4'>�������������������������� </span>Description<o:p></o:p></u></pre><pre><o:p> </o:p></pre><pre><span +class=GramE>ElamSample.htm<span style='mso-tab-count:3'>���������������� </span>Documentation for this sample (this file).</span></pre><pre><o:p> </o:p></pre><pre><span +class=SpellE><span class=GramE>ElamSample.c</span></span><span class=GramE><span +style='mso-tab-count:3'>������������������ </span><span class=SpellE>DriverEntry</span> and Callback processing.</span></pre><pre><span +class=SpellE>ElamSample.h</span><span style='mso-tab-count:3'>������������������ </span>Header <span +class=GramE>file</span> with definitions and prototypes.</pre><pre><span +class=SpellE>ElamSample.rc</span><span style='mso-tab-count:3'>����������������� </span>Resource <span +class=GramE>file</span> for the sample.</pre><pre><span class=GramE>Sources<span +style='mso-tab-count:4'>����������������������� </span>Generic file that lists source files and all the build options.</span></pre> + +<p align=center style='text-align:center;tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><a +href="#top"><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Top +of page</span></a><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'> +<o:p></o:p></span></p> + +<table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width=624 + style='width:6.5in;mso-cellspacing:0in;mso-yfti-tbllook:1184;mso-padding-alt: + 0in 5.4pt 0in 5.4pt'> + <tr style='mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes; + height:1.5pt'> + <td style='background:aqua;padding:.75pt .75pt .75pt .75pt;height:1.5pt'> + <p class=MsoNormal><span style='font-size:2.0pt;mso-bidi-font-size:12.0pt'><o:p> </o:p></span></p> + </td> + </tr> +</table> + +<p style='tab-stops:45.8pt 91.6pt 137.4pt 183.2pt 229.0pt 274.8pt 320.6pt 366.4pt 412.2pt 458.0pt 503.8pt 549.6pt 595.4pt 641.2pt 687.0pt 732.8pt'><span +style='font-size:7.5pt;font-family:"MS Sans Serif","serif"'>� 2011 Microsoft Corporation</span><span +style='font-size:10.0pt;font-family:"Verdana","sans-serif"'> <o:p></o:p></span></p> + +</div> + +</body> + +</html> diff --git a/security/elam/elamsample.vcxproj b/security/elam/elamsample.vcxproj index e490e121..fd4a3004 100644 --- a/security/elam/elamsample.vcxproj +++ b/security/elam/elamsample.vcxproj @@ -19,12 +19,12 @@ </ProjectConfiguration> </ItemGroup> <PropertyGroup Label="Globals"> - <ProjectGuid>{C71588A8-91B3-4830-A8BC-EE0CADD1F74F}</ProjectGuid> + <ProjectGuid>{691F9AAE-40A3-4950-8529-1C817ED43A61}</ProjectGuid> <RootNamespace>$(MSBuildProjectName)</RootNamespace> <KMDF_VERSION_MAJOR>1</KMDF_VERSION_MAJOR> <Configuration Condition="'$(Configuration)' == ''">Debug</Configuration> <Platform Condition="'$(Platform)' == ''">Win32</Platform> - <SampleGuid>{E8CB1907-B783-4529-86E1-12F5415AB9D2}</SampleGuid> + <SampleGuid>{06CC2AEF-6CBC-49CE-B869-459F80D28EC0}</SampleGuid> </PropertyGroup> <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" /> <PropertyGroup Label="Configuration" Condition="'$(Configuration)|$(Platform)'=='Release|x64'"> diff --git a/security/elam/elamsample.vcxproj.Filters b/security/elam/elamsample.vcxproj.Filters index 3683aaec..6e8c26bb 100644 --- a/security/elam/elamsample.vcxproj.Filters +++ b/security/elam/elamsample.vcxproj.Filters @@ -3,19 +3,19 @@ <ItemGroup> <Filter Include="Source Files"> <Extensions>cpp;c;cc;cxx;def;odl;idl;hpj;bat;asm;asmx;*</Extensions> - <UniqueIdentifier>{3A878DCA-5746-41B2-9BE4-9535E3608E01}</UniqueIdentifier> + <UniqueIdentifier>{D19514A8-1E7E-43BE-80B3-850E5BFCD858}</UniqueIdentifier> </Filter> <Filter Include="Header Files"> <Extensions>h;hpp;hxx;hm;inl;inc;xsd</Extensions> - <UniqueIdentifier>{531B9233-20AD-48D5-9E0F-A34ECBD0BBCF}</UniqueIdentifier> + <UniqueIdentifier>{379127B6-7854-4E76-996A-4C2A635EE774}</UniqueIdentifier> </Filter> <Filter Include="Resource Files"> <Extensions>rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms;man;xml</Extensions> - <UniqueIdentifier>{A70EFA76-F255-4C79-A344-617EEEFE6F2A}</UniqueIdentifier> + <UniqueIdentifier>{EF2BCD73-C364-4E77-BB95-15C633EAB208}</UniqueIdentifier> </Filter> <Filter Include="Driver Files"> <Extensions>inf;inv;inx;mof;mc;</Extensions> - <UniqueIdentifier>{8CE83F1F-76AF-4984-A91B-7054E133CD6C}</UniqueIdentifier> + <UniqueIdentifier>{A4C7ECB5-5FA4-4E9E-BF1C-5DF0BAF5BFE9}</UniqueIdentifier> </Filter> </ItemGroup> <ItemGroup> |