EaseFilter File Access Monitor SDK 5.2.4.1
aseFilter File Access Monitor SDK allows you to develop file audit and file monitor Windows application, to monitor the file change and file access in real time, intercept the file I/O requests. You can capture the file open, file creation, file change, file read, file written, query file information, set file information, query security information, set security information, file rename, file delete, directory browsing and file close I/O requests. You can create the file access log, you will know who, when, what files were accessed. You can get comprehensive control and visibility over users and data by tracking and monitoring all the user & file activities, permission changes, storage capacity and generate real-time audit reports.
EaseFilter File Access Monitor SDK is a file system filter driver, a kernel-mode component that runs as part of the Windows executive above the file system. The EaseFilter file system filter driver can intercept requests targeted at a file system or another file system filter driver. By intercepting the request before it reaches its intended target, the filter driver can extend or replace functionality provided by the original target of the request. The EaseFilter file system filter driver can log, observe, modify, or even prevent the I/O operations for one or more file systems or file system volumes.
With the EaseFilter File Monitor SDK, you can get the notification when the managed files were changed with below events:
File Creation Event: You can get the notification when a new file was created.
File Delete Event: you can get the notification when a file was deleted.
File Rename Event: You can get the notification when a file was renamed.
File Write Event: You can get the notification when a file was written with data.
File Security Changed Event: You can get the notification when a files security was changed.
File Information Changed Event: You can get the notification when a file information was changed.
Requirements
Changes: 5.2.4.1
2. Fixed an offset/length issue when monitor the read or write operations from SMB.
