← Back to context Comment by wolfi1 7 days ago if processes lock the file shouldn't AV refrain from reading or even writing it? 1 comment wolfi1 Reply rcxdude 7 days ago Nope, AV hooks into the filesystem layer (the NT kernel has 'filesystem filters' for this) and intercepts all reads and writes on the system.
rcxdude 7 days ago Nope, AV hooks into the filesystem layer (the NT kernel has 'filesystem filters' for this) and intercepts all reads and writes on the system.
Nope, AV hooks into the filesystem layer (the NT kernel has 'filesystem filters' for this) and intercepts all reads and writes on the system.