EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Can I detect which files are accessed by a process tree

Also by EldoS: CallbackDisk
Create virtual disks backed by memory or custom location, expose disk images as disks and more.
#36126
Posted: 03/04/2016 05:21:43
by Peter Jaspers (Basic support level)
Joined: 03/04/2016
Posts: 1

I start a process, say myprocess. myprocess may start child processes (recursively).
Given the process id (pid) of myprocess, can I now detect which files are accessed (for read) by myprocess and all of its child processes.
#36127
Posted: 03/04/2016 07:22:14
by Vladimir Cherniga (EldoS Corp.)

I think that parent process ID can be obtain on new process creation event. Than may be effectively catch using our CallbackProcess product.

Reply

Statistics

Topic viewed 1898 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!