NU
Nukem9/BindFltAPI
Undocumented BindFlt user mode API.
bindfltapi
Undocumented BindFlt user mode API otherwise known as bindfltapi.dll, bindflt.dll, or bindlink.dll.
Information has been sourced from BuildXL, hcsshim, and go-winio. BindFlt's public successor, Bindlink, was introduced roughly a year ago but still hasn't been released at the time of writing.
This header expects machines to be running Windows 10 RS6 or newer. Older editions have minor API changes and aren't guaranteed to work.
Building the example
- CMake and vcpkg are expected to be set up beforehand. Visual Studio 2022 is recommended.
- Open the directory in Visual Studio and select the
Debug x64orRelease x64preset. - Build.
- Run
BindfltAPIDemo.exe.
License
On this page
Languages
C++61.3%C26.4%CMake12.3%
Contributors
MIT License
Created January 28, 2024
Updated January 11, 2026