# Driver Comm

> Usermode↔kernel driver communication: IOCTL design, shared sections, events, security descriptors, stealth IOCTL.

- Skill: `netvar1337/driver-comm` (Agent Skill)
- Install (CLI): `npx skillmds@latest add netvar1337/driver-comm`
- Raw SKILL.md: https://api.skillmd.com/api/skills/netvar1337/driver-comm/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- License: GPL-3.0-or-later
- Author: netvar1337 (https://skillmd.com/u/netvar1337)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/netvar1337/driver-comm

---


# Driver communication

## Channels
- DeviceIoControl IOCTL
- Shared memory sections + events
- Ports/ALPC (rare)

## Design
- Validate IRQL, buffer methods (METHOD_BUFFERED preferred)
- ACL device object; avoid \Device\EasyToFind names
- Version handshake; deny unknown clients