4 ms·
No, it’s not NTFS, it’s the file system filter architecture of the NT kernel.
by p_ing 7mo ago
No, it’s not NTFS, it’s the file system filter architecture of the NT kernel.
- mattbee 7mo agoI had internalised that it was Windows Defender hooking every file operation and checking it against a blacklist? I've had it forced off for years.
- p_ing 7mo agoWindows Defender is a file system filter which you cannot disable. You may have others (but they're fortunately rare, now). All that said, you cannot disable the architecture, i.e. bypass the file system filter code.
- rstat1 7mo agoYou can with Dev Drives now apparently, which don't use NTFS and disable ALL the filter drivers (including the Defender one) I stopped using Windows just as these were added so now I'm curious if there's any actual performance benefit to using the.
- p_ing 7mo agoNo, they don't disable the Windows Defender filter, they put it in async mode.
- zer0zzz 7mo agoThis guy gets it. Yes bingo. It's the VFS' filters/ACLs support afaik.