User open file or not

NTFSD
1

How can I recognize a user opened file from file system filter driver!

Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

2

>How can I recognize a user opened file from file system filter driver!

I don’t understand ur actual question, so please give more details.

u can make ur File System Filter Driver that attached above file system
driver, for sample code see FileMon.zip utility along with source code
available at www.sysinternals.com.

Since u have attached ur filter driver above file system, each and every
ioctl u get before file system, so for open request u can watch
IRP_MJ_CREATE, and u can trace it down each opened file request.

Parag

Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

3

Hi
I guess the guy want to know the user ID of the
precess can the file system io access.
Good Lucky

Best Regards
Jansen Zhu.
----- Original Message -----
From: Parag Sanghvi
To: File Systems Developers
Sent: Thursday, August 17, 2000 2:21 AM
Subject: [ntfsd] Re: User open file or not

>
>
>
> >How can I recognize a user opened file from file system filter driver!
>
> I don’t understand ur actual question, so please give more details.
>
> u can make ur File System Filter Driver that attached above file system
> driver, for sample code see FileMon.zip utility along with source code
> available at www.sysinternals.com.
>
> Since u have attached ur filter driver above file system, each and every
> ioctl u get before file system, so for open request u can watch
> IRP_MJ_CREATE, and u can trace it down each opened file request.
>
>
> Parag
>
>
>
> ________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@citiz.net
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>