Just watched this interesting video on a Microsoft channel
hxxp://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-47-WPT-MiniFilter-Analysis
Those guys use Windows Performance Analyzer to see a "mini-filter" trace generated by xperf while a Windows antivirus scans some files.
I tried with a scan with NOD32 4.2.71 but at the end I don't get any data to view, so I was wondering if NOD32 uses this "mini-filters" approach or not.
Any idea?
Thanks in advance