My purpose is;
to track write and read operations for some specific files. For that reason, I wrote a post create callback and I am creating a Stream Context for some files and attach it to that file object. This works for many files, but not for some others. I got STATUS_NOT_SUPPORTED. All files are on same NTFS volume. I looked at the FILE_OBJEST's FSContext variable. They are NULL. These are the temp files with "tmp" extension and used by CorelDraw application during file saving. Interestingly, context are successfuly attached to some temp files.
My question is;
1. I need to track all read and writes to some specific files. I can not use file name in read and write callback. How can I distinguish that request if I cannot attach a context them ?
2. If FsContext is Null, can I set them to any value. Is this cause a problem ?
3. Ms office also saves files as temp file then rename it. Coupd you please provide me some information about temp files (which are used during saving).
Target platform is Windows 10 64bit. Development tool is Visual Studio 2015.