Hello there,
Whether you can implement IO read/write filtering on hard disks using WDF depends on the type of driver you're developing and the purpose of the filtering.
Output buffers receive information from the driver. For read requests, this information is typically data that a function driver receives from a device. For device I/O control requests, an output buffer might receive status or other information that was specified by the request's I/O control code.
The technique that your driver uses to access a request's data buffers depends on the driver's method for accessing data buffers for a device.
Accessing Data Buffers in WDF Drivers (KMDF or UMDF) https://learn.microsoft.com/en-us/windows-hardware/drivers/wdf/accessing-data-buffers-in-wdf-drivers
Hope this resolves your Query !!
--If the reply is helpful, please Upvote and Accept it as an answer–