{
  "driverModel": "storport",
  "relatedDDIs": [
    "CcWaitForCurrentLazyWriterActivity",
    "CmRegisterCallback",
    "CmRegisterCallbackEx",
    "CmUnRegisterCallback",
    "DbgBreakPoint",
    "DbgBreakPointWithStatus",
    "EtwRegister",
    "EtwUnregister",
    "ExAcquireFastMutex",
    "ExAcquireFastMutexUnsafe",
    "ExAcquireResourceExclusiveLite",
    "ExAcquireResourceSharedLite",
    "ExAcquireRundownProtection",
    "ExAcquireRundownProtectionCacheAware",
    "ExAcquireRundownProtectionCacheAwareEx",
    "ExAcquireRundownProtectionEx",
    "ExAcquireSharedStarveExclusive",
    "ExAcquireSharedWaitForExclusive",
    "ExAcquireSpinLock",
    "ExAcquireSpinLockAtDpcLevel",
    "ExAllocatePool",
    "ExAllocatePoolWithQuota",
    "ExAllocatePoolWithQuotaTag",
    "ExAllocatePoolWithTag",
    "ExAllocatePoolWithTagPriority",
    "ExConvertExclusiveToSharedLite",
    "ExCreateCallback",
    "ExDeletePagedLookasideList",
    "ExDeleteResourceLite",
    "ExEnterCriticalRegionAndAcquireResourceExclusive",
    "ExEnterCriticalRegionAndAcquireResourceShared",
    "ExEnterCriticalRegionAndAcquireSharedWaitForExclusive",
    "ExGetExclusiveWaiterCount",
    "ExGetSharedWaiterCount",
    "ExInitializePagedLookasideList",
    "ExInitializeResource",
    "ExInitializeResourceLite",
    "ExIsProcessorFeaturePresent",
    "ExIsResourceAcquired",
    "ExIsResourceAcquiredExclusive",
    "ExIsResourceAcquiredExclusiveLite",
    "ExIsResourceAcquiredLite",
    "ExIsResourceAcquiredShared",
    "ExIsResourceAcquiredSharedLite",
    "ExRaiseAccessViolation",
    "ExRaiseDatatypeMisalignment",
    "ExRaiseStatus",
    "ExRegisterCallback",
    "ExReinitializeResourceLite",
    "ExReleaseFastMutex",
    "ExReleaseFastMutexUnsafe",
    "ExReleaseResourceAndLeaveCriticalRegion",
    "ExReleaseResourceForThreadLite",
    "ExReleaseResourceLite",
    "ExReleaseRundownProtection",
    "ExReleaseRundownProtectionCacheAware",
    "ExReleaseRundownProtectionCacheAwareEx",
    "ExReleaseRundownProtectionEx",
    "ExReleaseSpinLock",
    "ExReleaseSpinLockFromDpcLevel",
    "ExSetResourceOwnerPointer",
    "ExSetResourceOwnerPointerEx",
    "ExSetTimerResolution",
    "ExTryToAcquireFastMutex",
    "ExUnregisterCallback",
    "ExUuidCreate",
    "ExWaitForRundownProtectionRelease",
    "ExWaitForRundownProtectionReleaseCacheAware",
    "FsRtlAllocateFileLock",
    "FsRtlAreNamesEqual",
    "FsRtlBalanceReads",
    "FsRtlCancellableWaitForMultipleObjects",
    "FsRtlCancellableWaitForSingleObject",
    "FsRtlCheckLockForReadAccess",
    "FsRtlCheckLockForWriteAccess",
    "FsRtlCopyWrite",
    "FsRtlDeregisterUncProvider",
    "FsRtlDissectName",
    "FsRtlDoesNameContainWildCards",
    "FsRtlFastCheckLockForRead",
    "FsRtlFastCheckLockForWrite",
    "FsRtlFastUnlockAll",
    "FsRtlFastUnlockAllByKey",
    "FsRtlFastUnlockSingle",
    "FsRtlFreeFileLock",
    "FsRtlGetFileSize",
    "FsRtlGetNextFileLock",
    "FsRtlIncrementCcFastReadNoWait",
    "FsRtlIncrementCcFastReadWait",
    "FsRtlInitializeFileLock",
    "FsRtlIsNameInExpression",
    "FsRtlMdlReadCompleteDev",
    "FsRtlMdlWriteCompleteDev",
    "FsRtlNotifyFilterChangeDirectory",
    "FsRtlNotifyFilterReportChange",
    "FsRtlNotifyFullChangeDirectory",
    "FsRtlNotifyFullReportChange",
    "FsRtlPrivateLock",
    "FsRtlProcessFileLock",
    "FsRtlRegisterUncProvider",
    "FsRtlRegisterUncProviderEx",
    "FsRtlRemoveDotsFromPath",
    "FsRtlUninitializeFileLock",
    "FsRtlValidateReparsePointBuffer",
    "HalExamineMBR",
    "HalGetInterruptVector",
    "IoAcquireCancelSpinLock",
    "IoAcquireVpbSpinLock",
    "IoAllocateController",
    "IoAllocateIrp",
    "IoAssignArcName",
    "IoAttachDevice",
    "IoAttachDeviceToDeviceStack",
    "IoAttachDeviceToDeviceStackSafe",
    "IoBuildAsynchronousFsdRequest",
    "IoBuildDeviceIoControlRequest",
    "IoBuildSynchronousFsdRequest",
    "IoCallDriver",
    "IoCancelIrp",
    "IoCheckShareAccess",
    "IoCompleteRequest",
    "IoConnectInterrupt",
    "IoConnectInterruptEx",
    "IoCreateController",
    "IoCreateDevice",
    "IoCreateDeviceSecure",
    "IoCreateFile",
    "IoCreateNotificationEvent",
    "IoCreateSymbolicLink",
    "IoCreateSynchronizationEvent",
    "IoCreateUnprotectedSymbolicLink",
    "IoDeassignArcName",
    "IoDeleteController",
    "IoDeleteDevice",
    "IoDeleteSymbolicLink",
    "IoDetachDevice",
    "IoDisconnectInterrupt",
    "IofCallDriver",
    "IofCompleteRequest",
    "IoFreeController",
    "IoFreeIrp",
    "IoGetAttachedDeviceReference",
    "IoGetConfigurationInformation",
    "IoGetDeviceInterfaceAlias",
    "IoGetDeviceInterfaces",
    "IoGetDeviceNumaNode",
    "IoGetDeviceObjectPointer",
    "IoGetDeviceProperty",
    "IoGetDevicePropertyData",
    "IoGetDeviceToVerify",
    "IoGetDmaAdapter",
    "IoGetFileObjectGenericMapping",
    "IoGetInitialStack",
    "IoInitializeIrp",
    "IoInitializeTimer",
    "IoInvalidateDeviceRelations",
    "IoIsWdmVersionAvailable",
    "IoOpenDeviceInterfaceRegistryKey",
    "IoOpenDeviceRegistryKey",
    "IoRaiseHardError",
    "IoRaiseInformationalHardError",
    "IoReadPartitionTable",
    "IoReadPartitionTableEx",
    "IoRegisterBootDriverReinitialization",
    "IoRegisterDeviceInterface",
    "IoRegisterDriverReinitialization",
    "IoRegisterLastChanceShutdownNotification",
    "IoRegisterPlugPlayNotification",
    "IoRegisterShutdownNotification",
    "IoReleaseCancelSpinLock",
    "IoReleaseVpbSpinLock",
    "IoRemoveShareAccess",
    "IoReplacePartitionUnit",
    "IoReportDetectedDevice",
    "IoReportTargetDeviceChange",
    "IoReportTargetDeviceChangeAsynchronous",
    "IoReuseIrp",
    "IoSetCompletionRoutineEx",
    "IoSetDeviceInterfaceState",
    "IoSetDevicePropertyData",
    "IoSetPartitionInformation",
    "IoSetPartitionInformationEx",
    "IoSetShareAccess",
    "IoSetStartIoAttributes",
    "IoStartNextPacket",
    "IoUnregisterPlugPlayNotification",
    "IoUnregisterPlugPlayNotificationEx",
    "IoUnregisterShutdownNotification",
    "IoUpdateShareAccess",
    "IoWMIAllocateInstanceIds",
    "IoWMIRegistrationControl",
    "IoWritePartitionTable",
    "IoWritePartitionTableEx",
    "KeAcquireGuardedMutex",
    "KeAcquireGuardedMutexUnsafe",
    "KeAcquireInStackQueuedSpinLock",
    "KeAcquireInStackQueuedSpinLockAtDpcLevel",
    "KeAcquireInStackQueuedSpinLockForDpc",
    "KeAcquireInterruptSpinLock",
    "KeAcquireSpinLock",
    "KeAcquireSpinLockAtDpcLevel",
    "KeAcquireSpinLockForDpc",
    "KeAcquireSpinLockRaiseToDpc",
    "KeAreAllApcsDisabled",
    "KeAreApcsDisabled",
    "KeCancelTimer",
    "KeClearEvent",
    "KeDelayExecutionThread",
    "KeDeregisterNmiCallback",
    "KeEnterCriticalRegion",
    "KeEnterGuardedRegion",
    "KefAcquireSpinLockAtDpcLevel",
    "KeFlushQueuedDpcs",
    "KefReleaseSpinLockFromDpcLevel",
    "KeGetCurrentIrql",
    "KeInitializeDeviceQueue",
    "KeInitializeEvent",
    "KeInitializeGuardedMutex",
    "KeInitializeMutex",
    "KeInitializeSemaphore",
    "KeInitializeSpinLock",
    "KeInitializeTimer",
    "KeInitializeTimerEx",
    "KeInsertByKeyDeviceQueue",
    "KeInsertDeviceQueue",
    "KeInsertHeadQueue",
    "KeInsertQueue",
    "KeInsertQueueDpc",
    "KeLeaveCriticalRegion",
    "KeLeaveGuardedRegion",
    "KeLowerIrql",
    "KePulseEvent",
    "KeQueryActiveProcessors",
    "KeQueryPriorityThread",
    "KeQueryRuntimeThread",
    "KeRaiseIrql",
    "KeRaiseIrqlToDpcLevel",
    "KeReadStateEvent",
    "KeReadStateMutex",
    "KeReadStateSemaphore",
    "KeReadStateTimer",
    "KeRegisterNmiCallback",
    "KeReleaseGuardedMutex",
    "KeReleaseGuardedMutexUnsafe",
    "KeReleaseInStackQueuedSpinLock",
    "KeReleaseInStackQueuedSpinLockForDpc",
    "KeReleaseInStackQueuedSpinLockFromDpcLevel",
    "KeReleaseInterruptSpinLock",
    "KeReleaseMutant",
    "KeReleaseMutex",
    "KeReleaseQueuedSpinLock",
    "KeReleaseSemaphore",
    "KeReleaseSpinLock",
    "KeReleaseSpinLockForDpc",
    "KeReleaseSpinLockFromDpcLevel",
    "KeRemoveByKeyDeviceQueue",
    "KeRemoveDeviceQueue",
    "KeRemoveEntryDeviceQueue",
    "KeRemoveQueue",
    "KeRemoveQueueDpc",
    "KeResetEvent",
    "KeRevertToUserAffinityThreadEx",
    "KeSaveFloatingPointState",
    "KeSetEvent",
    "KeSetSystemAffinityThread",
    "KeSetSystemGroupAffinityThread",
    "KeSetTimer",
    "KeSetTimerEx",
    "KeTestSpinLock",
    "KeTryToAcquireGuardedMutex",
    "KeTryToAcquireQueuedSpinLock",
    "KeTryToAcquireSpinLockAtDpcLevel",
    "KeWaitForMultipleObjects",
    "KeWaitForMutexObject",
    "KeWaitForSingleObject",
    "KfAcquireSpinLock",
    "KfLowerIrql",
    "KfRaiseIrql",
    "KfReleaseSpinLock",
    "MmAddPhysicalMemory",
    "MmAllocateNonCachedMemory",
    "MmAllocatePagesForMdl",
    "MmCreateMirror",
    "MmDoesFileHaveUserWritableReferences",
    "MmFreeContiguousMemory",
    "MmFreeNonCachedMemory",
    "MmFreePagesFromMdl",
    "MmGetPhysicalMemoryRanges",
    "MmGetSystemRoutineAddress",
    "MmLockPagableDataSection",
    "MmLockPagableSectionByHandle",
    "MmMapLockedPages",
    "MmMapLockedPagesSpecifyCache",
    "MmMapLockedPagesWithReservedMapping",
    "MmPageEntireDriver",
    "MmPrefetchPages",
    "MmProbeAndLockPages",
    "MmProbeAndLockProcessPages",
    "MmRemovePhysicalMemory",
    "MmResetDriverPaging",
    "MmSecureVirtualMemory",
    "MmUnlockPagableImageSection",
    "MmUnlockPages",
    "MmUnmapLockedPages",
    "MmUnsecureVirtualMemory",
    "ObDereferenceObject",
    "ObDereferenceObjectWithTag",
    "ObfDereferenceObject",
    "ObfDereferenceObjectWithTag",
    "ObfReferenceObject",
    "ObfReferenceObjectWithTag",
    "ObGetObjectSecurity",
    "ObReferenceObject",
    "ObReferenceObjectByHandle",
    "ObReferenceObjectByHandleWithTag",
    "ObReferenceObjectByPointer",
    "ObReferenceObjectByPointerWithTag",
    "ObReferenceObjectWithTag",
    "ObReleaseObjectSecurity",
    "PoCallDriver",
    "PoRequestPowerIrp",
    "ProbeForRead",
    "ProbeForWrite",
    "PsAssignImpersonationToken",
    "PsCreateSystemThread",
    "PsDereferenceImpersonationToken",
    "PsDereferencePrimaryToken",
    "PsDisableImpersonation",
    "PsGetVersion",
    "PshedRegisterPlugin",
    "PsImpersonateClient",
    "PsReferenceImpersonationToken",
    "PsReferencePrimaryToken",
    "PsRemoveLoadImageNotifyRoutine",
    "PsRestoreImpersonation",
    "PsRevertToSelf",
    "PsSetCreateProcessNotifyRoutine",
    "PsSetCreateProcessNotifyRoutineEx",
    "PsSetCreateThreadNotifyRoutine",
    "PsSetLoadImageNotifyRoutine",
    "PsTerminateSystemThread",
    "RtlDeleteRegistryValue",
    "SeAccessCheck",
    "SeAssignSecurity",
    "SeAssignSecurityEx",
    "SeDeassignSecurity",
    "SeLockSubjectContext",
    "SeReleaseSubjectContext",
    "SeSinglePrivilegeCheck",
    "SeUnlockSubjectContext",
    "SeValidSecurityDescriptor",
    "WdmlibIoCreateDeviceSecure",
    "ZwAllocateLocallyUniqueId",
    "ZwAllocateVirtualMemory",
    "ZwCancelTimer",
    "ZwClose",
    "ZwCommitComplete",
    "ZwCommitEnlistment",
    "ZwCommitTransaction",
    "ZwCreateDirectoryObject",
    "ZwCreateEnlistment",
    "ZwCreateEvent",
    "ZwCreateFile",
    "ZwCreateKey",
    "ZwCreateKeyTransacted",
    "ZwCreateResourceManager",
    "ZwCreateTimer",
    "ZwCreateTransaction",
    "ZwCreateTransactionManager",
    "ZwDeleteFile",
    "ZwDeleteKey",
    "ZwDeleteValueKey",
    "ZwDeviceIoControlFile",
    "ZwDisplayString",
    "ZwDuplicateToken",
    "ZwEnumerateKey",
    "ZwEnumerateTransactionObject",
    "ZwEnumerateValueKey",
    "ZwFlushBuffersFile",
    "ZwFlushKey",
    "ZwFreeVirtualMemory",
    "ZwFsControlFile",
    "ZwGetNotificationResourceManager",
    "ZwLoadDriver",
    "ZwLockFile",
    "ZwMakeTemporaryObject",
    "ZwMapViewOfSection",
    "ZwNotifyChangeKey",
    "ZwNotifyChangeMultipleKeys",
    "ZwOpenDirectoryObject",
    "ZwOpenEnlistment",
    "ZwOpenEvent",
    "ZwOpenFile",
    "ZwOpenKey",
    "ZwOpenKeyEx",
    "ZwOpenKeyTransacted",
    "ZwOpenKeyTransactedEx",
    "ZwOpenProcess",
    "ZwOpenProcessTokenEx",
    "ZwOpenResourceManager",
    "ZwOpenSection",
    "ZwOpenSymbolicLinkObject",
    "ZwOpenThreadTokenEx",
    "ZwOpenTimer",
    "ZwOpenTransaction",
    "ZwOpenTransactionManager",
    "ZwPowerInformation",
    "ZwPrepareComplete",
    "ZwPrepareEnlistment",
    "ZwPrePrepareComplete",
    "ZwPrePrepareEnlistment",
    "ZwQueryDirectoryFile",
    "ZwQueryEaFile",
    "ZwQueryFullAttributesFile",
    "ZwQueryInformationEnlistment",
    "ZwQueryInformationFile",
    "ZwQueryInformationResourceManager",
    "ZwQueryInformationToken",
    "ZwQueryInformationTransaction",
    "ZwQueryInformationTransactionManager",
    "ZwQueryKey",
    "ZwQueryMultipleValueKey",
    "ZwQueryObject",
    "ZwQueryQuotaInformationFile",
    "ZwQuerySecurityObject",
    "ZwQuerySymbolicLinkObject",
    "ZwQueryValueKey",
    "ZwQueryVolumeInformationFile",
    "ZwReadFile",
    "ZwReadOnlyEnlistment",
    "ZwRecoverEnlistment",
    "ZwRecoverTransactionManager",
    "ZwRenameKey",
    "ZwRollbackComplete",
    "ZwRollbackEnlistment",
    "ZwRollbackTransaction",
    "ZwRollforwardTransactionManager",
    "ZwSetEaFile",
    "ZwSetInformationEnlistment",
    "ZwSetInformationFile",
    "ZwSetInformationKey",
    "ZwSetInformationThread",
    "ZwSetInformationToken",
    "ZwSetInformationTransaction",
    "ZwSetInformationTransactionManager",
    "ZwSetQuotaInformationFile",
    "ZwSetSecurityObject",
    "ZwSetTimer",
    "ZwSetTimerEx",
    "ZwSetValueKey",
    "ZwSetVolumeInformationFile",
    "ZwSinglePhaseReject",
    "ZwTerminateProcess",
    "ZwUnloadDriver",
    "ZwUnlockFile",
    "ZwUnmapViewOfSection",
    "ZwWaitForSingleObject",
    "ZwWriteFile"
  ],
  "ruleName": "HwStorPortProhibitedDDIs"
}