A question on identifying a file copy operation

NTFSD
1

Hi All,

Is there a way to distinguish between a file been copied by an
application from 2 files opened by an application for read and write?

Thanks.

2

I answered this one a couple of years ago:

FILE_COPY_OPERATION_NOT I think was the flag.

Jamey

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Yury Mazin
Sent: Tuesday, January 11, 2005 2:21 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] A question on identifying a file copy operation

Hi All,

Is there a way to distinguish between a file been copied by an application
from 2 files opened by an application for read and write?

Thanks.

Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

__________ NOD32 1.968 (20050111) Information __________

This message was checked by NOD32 antivirus system.
http://www.nod32.com

3

No. There are logs of ways of doing the copy using the app.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: Yury Mazin
To: Windows File Systems Devs Interest List
Sent: Tuesday, January 11, 2005 10:20 PM
Subject: [ntfsd] A question on identifying a file copy operation

Hi All,

Is there a way to distinguish between a file been copied by an application from 2 files opened by an application for read and write?

Thanks.

Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com