How detect drag and drop file action

NTFSD
1

Hi All,

I am maintain an mini-filter for data loss protection. every thing is working fine…

but i am stuck when user performs an action of drag and drop file and i am failed to detect this action and result to this my destination file is getting deleted.

Thanks

2

With using COM and OLE :slight_smile:

3 нояб. 2016 г. 10:34 AM пользователь написал:

>

> Hi All,
>
> I am maintain an mini-filter for data loss protection. every thing is
working fine…
>
> but i am stuck when user performs an action of drag and drop file and i
am failed to detect this action and result to this my destination file is
getting deleted.
>
> Thanks
>
> —
> NTFSD is sponsored by OSR
>
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
software drivers!
> Details at http:
>
> To unsubscribe, visit the List Server section of OSR Online at <
http://www.osronline.com/page.cfm?name=ListServer&gt;</http:>

3

isn’t there any way to detect it at kernel level.

4

No means

3 нояб. 2016 г. 11:08 AM пользователь написал:

> isn’t there any way to detect it at kernel level.
>
> —
> NTFSD is sponsored by OSR
>
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> software drivers!
> Details at http:
>
> To unsubscribe, visit the List Server section of OSR Online at <
> http://www.osronline.com/page.cfm?name=ListServer&gt;
></http:>

5

Add a secondary drive to your test system, run Process Monitor or File Spy,
and perform the drag and drop operation. You can use the resulting output to
determine what happens at the FS level during a drag and drop.

You surely can determine when a file is created by a user, regardless of the
action. What you can’t do is trace the file create back to some higher level
activity (i.e. this file was created due to a drag and drop). As Anatoly
stated, this would presumably require integration with the user mode
subsystems as it is a user mode thing (I have never tried to do this and
have no experience to share).

-scott
OSR
@OSRDrivers

wrote in message news:xxxxx@ntfsd…

Hi All,

I am maintain an mini-filter for data loss protection. every thing is
working fine…

but i am stuck when user performs an action of drag and drop file and i am
failed to detect this action and result to this my destination file is
getting deleted.

Thanks