Home/ Questions/Q 7720177
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-01T03:35:55+00:00

I need to capture the DeviceIoControl() system calls of an application. On linux, strace

  • 0

I need to capture the DeviceIoControl() system calls of an application. On linux, strace can be used to analyze all ioctl calls. Is there any similar functionality on windows?

MSDN website recommends a program called “Process Monitor” to analyze the real-time activities of executables. However, “Process Monitor” does not show anything about DeviceIoControl calls.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Have you tried OSR’s IRPTracker?

    IrpTracker allows you to monitor all I/O request packets (IRPs) on a system without the use of any filter drivers and with no references to any device objects, leaving the PnP system entirely undisturbed. In addition to being able to see the path the IRP takes down the driver stack and its ultimate completion status, a detailed view is available that allows you to see the entire contents of static portion of the IRP and an interpreted view of the current and previous stack locations.

    • 0