EldoS | Feel safer!

Software components for data protection, secure storage and transfer


Also by EldoS: CallbackDisk
Create virtual disks backed by memory or custom location, expose disk images as disks and more.
Posted: 01/10/2014 04:47:46
by APU  (Basic support level)
Joined: 01/09/2014
Posts: 6

I download the zip of CallbackFilter and installed.
I have a evaluation key for it but i don't find any sample to test it.
Anybody tell me where i can find any sample?
Posted: 01/10/2014 04:52:42
by Eugene Mayevski (EldoS Corp.)

Isn't there Samples subdirectory present in the directory to which you have installed CallbackFilter?

Sincerely yours
Eugene Mayevski
Posted: 01/10/2014 06:50:06
by APU  (Basic support level)
Joined: 01/09/2014
Posts: 6

I didn't see it.
Another question.
I want only filter new create files.
What event and what CbFltCallbackFlags i need implement?
I tested it whith the filemon project and i can't do it
Posted: 01/10/2014 06:51:52
by APU  (Basic support level)
Joined: 01/09/2014
Posts: 6

I tried implement the event
but i don't know what CbFltCallbackFlags.
I tried with all.
Posted: 01/10/2014 06:55:40
by Eugene Mayevski (EldoS Corp.)

Depending on your task, you need one of the following:

1) OnCreateFileC/OnOpenFileC
2) OnPostCreateFileC/OnPostOpenFileC
3) OnCreateFileN/OnOpenFileN

The first set is called synchronously before the file is created/opened.
The second set is called synchronously after the file is created/opened.

"Synchronously" means that the event is fired before execution returns to the originating process (the one that requested file creation/opening).

The third set is called asynchronously after the file is created/opened, this is similar to what FileSystemWatcher does in .NET.

Why handle both Create and Open events: depending on what flags the file is created/opened with any of the events can be triggered. This is beyond control of CallbackFilter.

Sincerely yours
Eugene Mayevski
Posted: 01/10/2014 10:37:44
by APU  (Basic support level)
Joined: 01/09/2014
Posts: 6

Thanks for the explanation. Now I can run the code correctly.
I have another question.
I implement the OnCreateFileN event that activates the new create files at the path. If I copy/create some files I just view that the event is raised one time, no problem about it, but i need to know the names of the news files. How can I know theirs?

I ask apologize, my english is terrible.
Thanks again
Posted: 01/10/2014 10:39:11
by Eugene Mayevski (EldoS Corp.)

Yeah, your idea is not quite clear. Please try to explain it in more details, maybe we'll understand the question better then.

Sincerely yours
Eugene Mayevski
Posted: 01/10/2014 10:51:30
by APU  (Basic support level)
Joined: 01/09/2014
Posts: 6

I try it

When file is created at the path that listened the CallbackFilter, the event OnCreateFileN is launch.
How i can know the name of the file that is created?

In filemon sample:

//the event
mFilter.OnCreateFileN = CbFltCreateFileN;

//The void that launch when the event is launched.
void CbFltCreateFileN(object Sender, string FileName, ACCESS_MASK DesiredAccess, UInt32 FileAttributes, UInt16 ShareMode, UInt32 Options, UInt16 CreateDisposition, Int32 Status)

////////HERE, How i can Kwon the name of the file? Not is the Filename parameter because it is the path
////////where is created

Posted: 01/10/2014 11:03:45
by Eugene Mayevski (EldoS Corp.)

FileName parameter should contain the name of the file. We will check the issue.

Sincerely yours
Eugene Mayevski
Posted: 01/10/2014 12:04:11
by Vladimir Cherniga (EldoS Corp.)

How do you create the target file exactly ? Please explain.
Also by EldoS: CallbackRegistry
A component to monitor and control Windows registry access and create virtual registry keys.



Topic viewed 5488 times

Number of guests: 1, registered members: 0, in total hidden: 0


Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!