File System Hook

File System Hook

Post by Srusa » Sat, 18 Mar 2006 13:14:47


I am trying to hook the file system to get the notifications whenever
an application / process opens a file. I must be able to get the
process' information (i.e. name, path, etc).

I do know that it has to be done at the file system driver layer by
having a filter driver (Is there any other way?). But I could not get
any source code. I am posting this question here with the hope that
atleast one of you would have faced similar situation. It would be
great, if someone give me a link that points to the source.

Thanks a lot