I'm extending minispyfilter driver part of WDK sample to monitor a folder and send notification as and when a file is opened.
The driver has registered only for IRP_MJ_CREATE,Cleanup and Write.
When I open a txt file using notepad, I immediately get a notification with Create and Cleanup. When I close the notepad again getting create and cleanup.
When I write something in the notepad and close the notepad and select save, I get multiple Create and Cleanup.
My requirement is simple. Whenever a user opens a file a notification has to be sent. Whenever the user closes a file again a notification has to be sent.
Appreciate if someone can help me on this.