System A has shared folder say “X”. System B is accessing “X”, now if system B copies a file from its local folder to shared folder “X” we see modification flag is set for this operation in cleanup I/O.
Similarly when system B modifies a file on shared drive “X” even then modification flag is set in cleanup I/O for this operation as well.
Is there a way we can differentiate between these two operation using flags or disposition.
Modification flag in cleanup? What is that?
To answer your question, there are heuristic approaches, but they won’t
even work for public, free apps sometimes.
If you just care for Explorer, then it’s doable, it follows a lot of rules
for file copy, that it doesn’t for other I/O.
Regards, Dejan.