I am writing a Windows kernel mode driver which uses API
PsSetCreateProcessNotifyRoutineEx
In its callback function, I need to get the current working directory of process. How this can be done? Any ideas, leads would be very useful.
Thanks in advance.