Search:

Build a minispy driver.

1. Download and install windows driver kit. WDK Windows Driver Kit | Overview for Driver Developers

2. click START/ All Programs/Windows Driver Kit/ WDK../Build...

I used a file system filter driver. Installed the driver minispy (had to disable windows signature enforcement), launched the .exe that talks to the driver which listens for all files being queried,...

Yes I'm going through filemon now and hopefully get something good from that. I'll let you guys know when I find a solution.

I gave ReadDirectoryChangesW() a shot to no avil. Here is the source code for the method. Although it does detect changes, it will NOT detect if a file has been opened.



wstring s2ws(const...

Ill give it a shot. Right now im looking at NTFS.

Chris

no one has any ideas still? Anyone try File Filter Drivers?

Chris

I have also now tried:



while(true)
{
struct stat stResult;
stat("c:\practiceFileRead.txt",&stResult);
Console::WriteLine("last time : {0}",stResult.st_atime);...

I am working on a system file monitoring tool. I need to be able to tell what files have/are being read (keyword is READ not modified). Things I have tried:



bool isFileOpen(string inputFile){...