need help regarding File Sys Filter Driver

NTFSD
1

Hello,

I want to capture a CreateFile system call in windows.

In more detail I want to capture an open file call, when any file on disk is
opened by any application.

I am very new to device driver development. Uptil now what I know is for
capturing CreateFile system call a

File System Filter Driver is needed. Is it true? Can anyone provide more
information about how should I proceed?

Also please let me know, do I need IFS kit for writing file system filter
driver?

Thanks and Regards,

Shri

2

> File System Filter Driver is needed. Is it true?

Correct.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

3

Look at “sfilter” and “filespy” samples included in IFS. They will
give you a good starting point

–
Roman Kudinov

mailto:xxxxx@rbcmail.ru

Tuesday, August 31, 2004, 2:41:58 PM, you wrote:

S> Hello,

S> I want to capture a CreateFile system call in windows.

S> In more detail I want to capture an open file call, when any file on disk is
S> opened by any application.

S> I am very new to device driver development. Uptil now what I know is for
S> capturing CreateFile system call a

S> File System Filter Driver is needed. Is it true? Can anyone provide more
S> information about how should I proceed?

S> Also please let me know, do I need IFS kit for writing file system filter
S> driver?

S> Thanks and Regards,

S> Shri

S> —
S> Questions? First check the IFS FAQ at
S> https://www.osronline.com/article.cfm?id=17

S> You are currently subscribed to ntfsd as: xxxxx@rbcmail.ru
S> To unsubscribe send a blank email to
S> xxxxx@lists.osr.com

4

Thanks a lot.
But I don’t have IFS. Is IFS is must for writing File system filter driver??

“Roman Kudinov” wrote in message news:xxxxx@ntfsd…
> Look at “sfilter” and “filespy” samples included in IFS. They will
> give you a good starting point
>
> –
> Roman Kudinov
>
>
> mailto:xxxxx@rbcmail.ru
>
>
> Tuesday, August 31, 2004, 2:41:58 PM, you wrote:
>
> S> Hello,
>
>
>
> S> I want to capture a CreateFile system call in windows.
>
> S> In more detail I want to capture an open file call, when any file on
> disk is
> S> opened by any application.
>
> S> I am very new to device driver development. Uptil now what I know is
> for
> S> capturing CreateFile system call a
>
> S> File System Filter Driver is needed. Is it true? Can anyone provide
> more
> S> information about how should I proceed?
>
>
>
> S> Also please let me know, do I need IFS kit for writing file system
> filter
> S> driver?
>
>
>
> S> Thanks and Regards,
>
> S> Shri
>
>
>
> S> —
> S> Questions? First check the IFS FAQ at
> S> https://www.osronline.com/article.cfm?id=17
>
> S> You are currently subscribed to ntfsd as: xxxxx@rbcmail.ru
> S> To unsubscribe send a blank email to
> S> xxxxx@lists.osr.com
>
>

5

Yes, it is a must.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

----- Original Message -----
From: “Shri”
Newsgroups: ntfsd
To: “Windows File Systems Devs Interest List”
Sent: Tuesday, August 31, 2004 3:17 PM
Subject: Re:[ntfsd] need help regarding File Sys Filter Driver

> Thanks a lot.
> But I don’t have IFS. Is IFS is must for writing File system filter driver??
>
> “Roman Kudinov” wrote in message news:xxxxx@ntfsd…
> > Look at “sfilter” and “filespy” samples included in IFS. They will
> > give you a good starting point
> >
> > –
> > Roman Kudinov
> >
> >
> > mailto:xxxxx@rbcmail.ru
> >
> >
> > Tuesday, August 31, 2004, 2:41:58 PM, you wrote:
> >
> > S> Hello,
> >
> >
> >
> > S> I want to capture a CreateFile system call in windows.
> >
> > S> In more detail I want to capture an open file call, when any file on
> > disk is
> > S> opened by any application.
> >
> > S> I am very new to device driver development. Uptil now what I know is
> > for
> > S> capturing CreateFile system call a
> >
> > S> File System Filter Driver is needed. Is it true? Can anyone provide
> > more
> > S> information about how should I proceed?
> >
> >
> >
> > S> Also please let me know, do I need IFS kit for writing file system
> > filter
> > S> driver?
> >
> >
> >
> > S> Thanks and Regards,
> >
> > S> Shri
> >
> >
> >
> > S> —
> > S> Questions? First check the IFS FAQ at
> > S> https://www.osronline.com/article.cfm?id=17
> >
> > S> You are currently subscribed to ntfsd as: xxxxx@rbcmail.ru
> > S> To unsubscribe send a blank email to
> > S> xxxxx@lists.osr.com
> >
> >
>
>
>
> —
> Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
>
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com