Re: monitoring file opens and closes

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Look at samples folder in latest WDK (for example,
C:\WinDDK\6001.17121\src\filesys\ ) this should give you some hints and
direction to move further.

--
Volodymyr, blog: http://www.shcherbyna.com/
(This posting is provided "AS IS" with no warranties, and confers no
rights)
"Girish mehta" <Girish mehta@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C7FEC4CC-9ECF-4993-BB64-B823761C4A17@xxxxxxxxxxxxxxxx
I am looking for the program which intercepts the filecreate at kernel
level
and makes and exact copy of files in different drive...
Any help will be appreciated as i am a uni student and have to finish this
job asap

Thanks


.

Relevant Pages

  • Re: NtQuerySystemInformation?
    ... You are interested in ImageName member which is a UNICODE_STRING struct. ... Volodymyr, blog: http://www.shcherbyna.com/ ... (This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.development.device.drivers)
  • Re: how to use CRITICAL_SECTION???
    ... Volodymyr, blog: http://www.shcherbyna.com/ ... (This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.win32.programmer.kernel)
  • Re: GetTcp6Table functionality on pre-Vista?
    ... I am afraid the only way to get it in XP is to filter \Device\Tcp6 device. ... Volodymyr, blog: http://www.shcherbyna.com/ ... (This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.win32.programmer.networks)
  • Re: Getting SID of process owner
    ... Volodymyr, blog: http://www.shcherbyna.com/ ... (This posting is provided "AS IS" with no warranties, ... After you have allocated big enough buffer at 5 call ...
    (microsoft.public.development.device.drivers)
  • Re: Workstation Domain Name Recovery
    ... did a logon using local administrator. ... Volodymyr, blog: http://www.shcherbyna.com/ ... (This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.win32.programmer.networks)