How to detect file readed

  • Thread starter Thread starter Enosh Chang
  • Start date Start date
E

Enosh Chang

Hi all,

I want to monitor one directory (and its subdirectories) in local machine.
How can I detect who and when reading files? I used
System.IO.FileSystemWather, but I couldn't get an event who is reading. My
environment is Windows 2003. Thanks for any advice.

Best Regards
Enosh Chang
 
Enosh Chang said:
I want to monitor one directory (and its subdirectories) in local machine.
How can I detect who and when reading files? I used
System.IO.FileSystemWather, but I couldn't get an event who is reading. My
environment is Windows 2003. Thanks for any advice.
Click to expand...

This isn't provided by the normal file hooks. To do this, you either need a
kernel mode driver like SysInternals Process Monitor does, or else use API
hooking for all processes.

-- David
 
Back
Top