How can i find which program modified a file?

  • Thread starter Thread starter Cyril Vi?ville
  • Start date Start date
C

Cyril Vi?ville

As it's written in the subject, i would like to know how can i find
which program modified a file (last access, last changed).

By example: Example.txt in a log directory
I need to know which apps wrote in

Thx
 
Unless the application marks it in some way, you can not determine the
*application* that wrote a file unless you watch while it's open. Assuming
an NTFS file system, you can turn on auditing and determine which *user*
modified the file.
 
KaHuNa said:
look the "StreamReader Class" in the sdk Framework .net
Click to expand...

Thx but it's just to know some info on the file but not on the last
program that modified it i think.
Do you have another solution?
 
Cyril Vi?ville said:
As it's written in the subject, i would like to know how can i find
which program modified a file (last access, last changed).

By example: Example.txt in a log directory
I need to know which apps wrote in
Click to expand...

I don't believe anything stores that information.
 
Your only option is writing a File system filter driver using the DDK
(Device Driver Development kit).
Managed code is not an option here.

Willy.
 
Willy Denoyette said:
Your only option is writing a File system filter driver using the DDK
(Device Driver Development kit).
Managed code is not an option here.

Willy.
Click to expand...

Really Thx.
I don't have time to do that!!! So my little antivirus 'll just use Filewatcher
and NotifyFilter but certainly not a DDD.
 
Back
Top