EaseFilter 文件系统进程过滤器驱动程序 SDKEasefilter Process Filter Driver SDK 是一个内核模式驱动程序，用于过滤进程/线程的创建和终止，它为您提供了一种用于开发 Windows 应用程序以进行 Windows 进程监视和保护的简单方法。EaseFilter Process Filter Driver SDK 使您的应用程序能够防止启动不受信任的可执行二进制文件(恶意软件)，从而保护您的数据不被不受信任的进程损坏。它还使您的应用程序能够获取进程/线程创建或终止的回调通知，从新进程信息中您可以获得新创建进程的父进程ID和线程ID，您还可以获得用于打开的确切文件名可执行文件和用于执行进程的命令行(如果可用)。
Easefilter file system process filter driver sdkeasefilter process filter driver SDK is a kernel mode driver used to filter the creation and termination of processes / threads. It provides you with a simple method for developing Windows applications to monitor and protect windows processes. The easefilter process filter driver SDK enables your application to prevent the launch of untrusted executable binaries (malware), thus protecting your data from being corrupted by untrusted processes. It also enables your application to get the callback notification of process / thread creation or termination. From the new process information, you can get the parent process ID and thread ID of the newly created process. You can also get the exact file name executable for opening and the command line for executing the process (if available).