监视Windows中的应用程序文件访问 [英] monitoring applications file access in Windows

问题描述

我需要监视Win 7操作系统中的应用程序文件访问.我想监视哪个软件在哪里读取，写入或创建文件.我认为，使用File System Watcher和审核无法进行这项工作.我该如何使用C#进行这项工作?有合适的API吗?

I need to monitor applications File Access in win 7 operating system. I want to monitor which software read, write or create file in which place. I think, this work is imposible with File System Watcher and auditing. how can I do this work with C#? Are there any appropriate APIs?

推荐答案

您需要文件系统过滤器驱动程序，以进行细粒度监视和跟踪哪些应用程序访问文件.开发内核模式驱动程序需要C编程和特殊知识.您可以自己编写驱动程序(阅读MSDN文章)或使用我们的 CallbackFilter 产品(它提供了预先创建的驱动程序和.NET API，可与您的软件集成).

You need a filesystem filter driver for fine-grain monitoring and tracking what applications access files. Developing a kernel-mode driver requires C programming and special knowledge. You can write a driver yourself (read MSDN article) or use our CallbackFilter product (it provides a pre-created driver and .NET API for integration with your software).

这篇关于监视Windows中的应用程序文件访问的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！