Hi Guys
i have a legacy file filter driver and i want to capture a filename during time of file creation.
but i do not know how to get a filename when file is opend by FILE_OPEN_BY_FILE_ID flag?
what i think…
when i get back to my create completion routine that time can i ask to underlying file system for file name ? b’z that time file was created so , i would get a filename…
or should i follow any other approach?
That’s right - you cannot call Query Info in precreate.
If the process doesn’t have Traverse (is that the name? I’m semi-AFI so
cannot research this), you may get access denied (but in my experience this
kind of set up is rare).
Rod
wrote in message news:xxxxx@ntfsd…
> Hi Guys
>
> i have a legacy file filter driver and i want to capture a filename during
> time of file creation.
>
> but i do not know how to get a filename when file is opend by
> FILE_OPEN_BY_FILE_ID flag?
>
> what i think…
>
> when i get back to my create completion routine that time can i ask to
> underlying file system for file name ? b’z that time file was created so ,
> i would get a filename…
>
> or should i follow any other approach?
>