Using WDM ( Windows Driver Model) to design the traps, the filtration drive intercept the operation done to the disk, then, get the original sector entries and its number of read-write disk and save this information in the linked list. 使用WDM(Windows驱动程序模型)设计该收集器,过滤驱动截获对磁盘的操作,得到读写磁盘的起始扇区以及扇区数并将这些信息保存到链表中。