How to detect file readed

[Enosh Chang]

Hi all,

I want to monitor one directory (and its subdirectories) in local machine.
How can I detect who and when reading files? I used
System.IO.FileSystemWather, but I couldn't get an event who is reading. My
environment is Windows 2003. Thanks for any advice.

Best Regards
Enosh Chang

 

[David Ching]

I want to monitor one directory (and its subdirectories) in local machine.
How can I detect who and when reading files? I used
System.IO.FileSystemWather, but I couldn't get an event who is reading. My
environment is Windows 2003. Thanks for any advice.

This isn't provided by the normal file hooks. To do this, you either need a
kernel mode driver like SysInternals Process Monitor does, or else use API
hooking for all processes.

-- David

 

[Guest]

try FileSystemWatcher()