Solved

Log file access

Posted on 1998-07-10
9
126 Views
Last Modified: 2010-04-04
In my app, I need to monitor and log all disk/CD access's for any files written or read. How can I do this without writing Vxd drivers in C++ ?.
0
Comment
Question by:npatel
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 7

Expert Comment

by:BlackMan
ID: 1357652
There is an example here with source (in C i guess). But you can properly find the relevant APIs
http://www.sysinternals.com/ntfilmon.htm
0
 
LVL 3

Expert Comment

by:KE
ID: 1357653
Look at the WIN32API FindFirstChangeNotification, this will however NOT log open/read of files (works on 95/NT).
If you plan to use Windows NT only, you can use a device driver as BlackMan writes, another way would be to use the security functions, and set the file objects to audit changes.

0
 
LVL 3

Expert Comment

by:KE
ID: 1357654
Any comment ?
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 4

Accepted Solution

by:
jeurk earned 30 total points
ID: 1357655
Hi,
I think that this cannot be done without some vxd programming.
A solution would be to get an already written vxd that does the job.
look at the following site : www.ntinternals.com in the 95 or the NT section
for a program called filemon it does the job you ask. it's free and has the sources
in C++.
Should be a good begin.
0
 
LVL 7

Expert Comment

by:BlackMan
ID: 1357656
Hmm, jeurk, apart from your wrong URL (ntinternals was their former address), that's just what I suggested...
0
 

Author Comment

by:npatel
ID: 1357657
Thanks,

The source code from filemon is a good start. The FindFirstChangeNotification will give an indication of file access in the system, but as KC mentioned no file Logging. I do however perfer examples in Delphi, of course.

0
 
LVL 4

Expert Comment

by:jeurk
ID: 1357658
Humm...
How can I say, I did not see your suggestion BlackMan... I'm sorry, really
I'm not that kind of guy. If you want I can ask a question for you to answer ? to give
you back the points. OK ?
0
 
LVL 7

Expert Comment

by:BlackMan
ID: 1357659
No, that's all right, maybe I can steal your suggestion another time :-)
No hard feelings...
0
 
LVL 4

Expert Comment

by:jeurk
ID: 1357660
Ok !
Anyway I apologize again.
0

Featured Post

Master Your Team's Linux and Cloud Stack!

The average business loses $13.5M per year to ineffective training (per 1,000 employees). Keep ahead of the competition and combine in-person quality with online cost and flexibility by training with Linux Academy.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this tutorial I will show you how to use the Windows Speech API in Delphi. I will only cover basic functions such as text to speech and controlling the speed of the speech. SAPI Installation First you need to install the SAPI type library, th…
Creating an auto free TStringList The TStringList is a basic and frequently used object in Delphi. On many occasions, you may want to create a temporary list, process some items in the list and be done with the list. In such cases, you have to…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question