On Thu 16 Nov 12:05 PST 2017, Chris Lew wrote:
+ req.event = SSCTL_SSR_EVENT_BEFORE_SHUTDOWN;
Are there plans to add the other SSR events to sysmon notifiers? I think the
SSCTL service expects to receive events about remote procs starting as well.
We could easily add support here to send out the AFTER_BOOTUP
notification, beyond that we would need to extend the subdev notifiers
But the downstream code paths does confuse me, can you confirm that
these messages are actually sent to the remote ssctl services?