I have to go back to my original question- what exactly are you
trying to do? If your trying to prevent IOKit from doing something,
you really need to be in the kernel. Based on what you've posted so
far the technique your trying to use isn't going to work. The system
simply isn't designed to work that way.
--
I want to track the activities going on SBP2 disks right from beginning, when the disk comes up.
Any way to do it from Application or kernel level?