Filesystem operation audit in your applications
If you need to find out (audit), what users or processes access and modify files and directories, and you need to do this in code (as a part of your software application), then CallbackFilter is right for you. It lets you audit file and directory operations in user mode, right in your .NET (C#, Visual Basic etc), C++ or VCL (Delphi or C++Builder) application.
What CallbackFilter offersCallbackFilter includes a pre-created filesystem filter driver which intercepts and notifies your application about file system operation requests that go to the filesystem. Your application can write down information about this operation, optionally deny it or even modify the request.