;-------------------------------------------------------------------------
; SophosED.inf
;
; Copyright 2015-2018 Sophos Limited. All rights reserved.
;-------------------------------------------------------------------------

[Version]
Signature   = "$Windows NT$"
Class       = "SecurityEnhancer"                        ;This is determined by the work this filter driver does
ClassGuid   = {d02bc3da-0c8e-4945-9bd5-f1883c226c8c}    ;This value is determined by the Class
Provider    = %SG%
DriverVer   = 06/11/2020, 2.2.4.517
CatalogFile = SophosED.cat


[DestinationDirs]
DefaultDestDir          = 12
MiniFilter.DriverFiles  = 12            ;%windir%\system32\drivers


;;
;; Default install and uninstall sections
;;
;; These are needed to pass Microsoft driver signing
;; and are used for "right-click" installations using the .inf file.
;; Sophos SED Setup.dll uses the Win7 or Win8 installation sections.
;;

[DefaultInstall]
OptionDesc          = %ServiceDescription%
CopyFiles           = MiniFilter.DriverFiles

[DefaultInstall.Services]
AddService          = %ServiceName%,,MiniFilter.Service.Win7

[DefaultUninstall]
DelFiles   = MiniFilter.DriverFiles

[DefaultUninstall.Services]
DelService = %ServiceName%,0x200      ;Ensure service is stopped before deleting


;;
;; Win8 / Server 2012 install and uninstall sections
;;

[Win8Install]
OptionDesc          = %ServiceDescription%
CopyFiles           = MiniFilter.DriverFiles

[Win8Install.Services]
AddService          = %ServiceName%,,MiniFilter.Service.Win8

[Win8Uninstall]
DelFiles   = MiniFilter.DriverFiles

[Win8Uninstall.Services]
DelService = %ServiceName%,0x200      ;Ensure service is stopped before deleting


;;
;; Win7/Server 2008 R2 install and uninstall sections
;;

[Win7Install]
OptionDesc          = %ServiceDescription%
CopyFiles           = MiniFilter.DriverFiles

[Win7Install.Services]
AddService          = %ServiceName%,,MiniFilter.Service.Win7

[Win7Uninstall]
DelFiles   = MiniFilter.DriverFiles

[Win7Uninstall.Services]
DelService = %ServiceName%,0x200      ;Ensure service is stopped before deleting


;
; Services Section
;   CNG.sys should be started prior to SophosED.sys.
;   Prior to Windows 10, CNG.sys starts in Base LoadOrderGroup.
;   Pointer Port is the first LoadOrderGroup after Base.
;

[MiniFilter.Service.Win8]
DisplayName      = %ServiceName%
Description      = %ServiceDescription%
ServiceBinary    = %12%\%DriverName%.sys        ;%windir%\system32\drivers\
ServiceType      = 2                            ;SERVICE_FILE_SYSTEM_DRIVER
StartType        = 0                            ;SERVICE_BOOT_START
ErrorControl     = 1                            ;SERVICE_ERROR_NORMAL
LoadOrderGroup   = "FSFilter Security Enhancer"
AddReg           = MiniFilter.AddRegistry

[MiniFilter.Service.Win7]
DisplayName      = %ServiceName%
Description      = %ServiceDescription%
ServiceBinary    = %12%\%DriverName%.sys        ;%windir%\system32\drivers\
ServiceType      = 2                            ;SERVICE_FILE_SYSTEM_DRIVER
StartType        = 0                            ;SERVICE_BOOT_START
ErrorControl     = 1                            ;SERVICE_ERROR_NORMAL
LoadOrderGroup   = "Pointer Port"
AddReg           = MiniFilter.AddRegistry


;
; Registry Modifications
;

[MiniFilter.AddRegistry]
HKR,,"DebugFacilities",0x00010001 ,0xffffffff
HKR,,"DebugLevel",0x00010001 ,2
HKR,"Instances","DefaultInstance",0x00000000,%DefaultInstance%
HKR,"Instances\"%Instance1.Name%,"Altitude",0x00000000,%Instance1.Altitude%
HKR,"Instances\"%Instance1.Name%,"Flags",0x00010001,%Instance1.Flags%
HKR,"Instances\"%Instance2.Name%,"Altitude",0x00000000,%Instance2.Altitude%
HKR,"Instances\"%Instance2.Name%,"Flags",0x00010001,%Instance2.Flags%
HKR,"Instances\"%Instance4.Name%,"Altitude",0x00000000,%Instance4.Altitude%
HKR,"Instances\"%Instance4.Name%,"Flags",0x00010001,%Instance4.Flags%

;
; Copy Files
;

[MiniFilter.DriverFiles]
SophosED.sys

[SourceDisksFiles]
SophosED.sys = 1,,

[SourceDisksNames]
1 = %DiskId1%,,,

;;
;; String Section
;;

[Strings]
SG                      = "Sophos Limited"
ServiceDescription      = "Sophos Endpoint Defense Mini-Filter Driver"
ServiceName             = "Sophos Endpoint Defense"
DriverName              = "SophosED"
DiskId1                 = "Sophos Endpoint Defense Device Installation Disk"

;Instances specific information.
DefaultInstance         = "SophosED Activity Monitor Instance"
Instance1.Name          = "SophosED Antivirus Instance"
Instance1.Altitude      = "324050"
Instance1.Flags         = 0x0              ; Allow all attachments
Instance2.Name          = "SophosED Security Enhancer Instance"
Instance2.Altitude      = "80670"
Instance2.Flags         = 0x0              ; Allow all attachments
Instance4.Name          = "SophosED Activity Monitor Instance"
Instance4.Altitude      = "389220"
Instance4.Flags         = 0x0              ; Allow all attachments