File interception API

[Dave Williams]

I'm considering a project that would involve 'catching' file access calls to
my hard drive, so if an app tries to read a file I can intercept the call
and supply my own data to the call (or replace the file with my own data).

I was assuming the NTFS API would have support for this sort of thing, but I
can't see any documentation in the SDK about how to do it. I guess I could
also 'implement' a file system, just handing every call on to the NTFS file
system except the one I want, but I can't see how to do that either.

Could anyone point me in the right direction, or tell me it's impossible?

Ideally I'd like something to work on any Windows platform from 2000 later,
but a WinXP/Win2003 only solution would still be interesting.

Thanks,
Dave

 

[Jochen Kalmbach]

Hi Dave Williams,

I'm considering a project that would involve 'catching' file access
calls to my hard drive, so if an app tries to read a file I can
intercept the call and supply my own data to the call (or replace the
file with my own data).

See: File System Filter Drivers
http://www.microsoft.com/whdc/driver/filterdrv/default.mspx

--
Greetings
Jochen

My blog about Win32 and .NET
http://blog.kalmbachnet.de/

 

[Dave Williams]

Thanks Jochen, that's just what I was looking for.