File System Filter Driver

Patel_Alpesh · August 17, 2010, 3:03am

Hi Guys,

i wanna develop a file system filter driver for monitoring create,read,write ,delete operation.

i gone through ddk samples and it seems like they used mini filter concept.

so, my question is that should i do it using mini filter or legacy driver? because i am afraid mini filter concept does not work on all NT OS.

OSR_Community_User · August 17, 2010, 3:14am

> i gone through ddk samples and it seems like they used mini filter concept.

I believe you mean WDK samples. There is both minif-ilter and legacy
filter, with user mode test program, that might be a good start for you.

Go for mini-filter, that is preferred for such kind of application.

L.

Patel_Alpesh · August 17, 2010, 3:16am

yeap WDK samples. thanks for your suggestion.

OSR_Community_User · August 17, 2010, 7:06am

> so, my question is that should i do it using mini filter or legacy driver? because i am afraid mini

concept does not work on all NT OS.

Minifilter.

Works on all OSes from w2k up, provided the most recent SPs are installed.