Get the latest tech news
Reversing a Fingerprint Reader Protocol (2021)
My Blog.
As a workaround it is possible to send the data 1:1 over TCP, capture this in a separate pcap, enter the PSK key in the wireshark settings, and then decrypt it. The WUDFHost process only spawns when the driver is needed, and then immediately runs the device initialization code, which makes debugging it more difficult. As this is a common problem when developing drivers, Windows provides a registry key do delay initialization until after a debugger is attached to WUDFHost ( HostProcessDbgBreakOnStart, see How to Prepare for UMDF Debugging).
Or read this on Hacker News