How to control Privilege

[HRNasr]

hello
current eBPF for windows can use for develop program with target of application control and file access?
Allow/Denied run a application ?
Allow/Black access to a file?

[dahavey]

We don't have those hooks in Windows right now. They are supported in Linux: BPF LSM, Kprobes. https://docs.kernel.org/bpf/prog_lsm.html