Is there any integrity check to validate which process is using CBFS Filter?


The CBFS Filter system drive will accept any valid request from any process. The best it could possibly do would be to check the name of the executable that's calling it (though this would require a custom build of the product, as such functionality is not currently present in the driver). Authenticity and integrity checks for the calling process is beyond the capabilities of the driver.

We appreciate your feedback. If you have any questions, comments, or suggestions about this article please contact our support team at support@callback.com.