Can a file system filter driver filter remote access to shares ?

NTFSD
1

Hi

I want to trace and monitor access to shared folders from a remote computer.
Does building a file system driver is the right solution?

I saw that FileMon can trace shared folders access… Do i need to
build something like that? any way to get it’s source or similar?

Also, besides buying the IFS kit, what other documentation / tutorials
/ books is available on the subject of FSD? (i have experience in
drivers…)

Thanks!