Making a sysytem file monitor, how ?

[amitjnkp]

Helo everyone,
i want to write a program that monitors the file operations occurring thoughout the windows.
i mean what files are being opened and modified so that i can implement some security system which monitors specific folders or whole drive.
but the problem is that i don't know how to start // any API that can help or does it require to write a device driver ?


thanks

 

[mgb_phys]

For NTFS there are user level events that monitor file system changes.
Look at Hart's "win32 System Programming" or MS technical reference for ntfs

 

[Burnsys]

If you want to do it your self, you can try with .Net, it has a cool filemonitor component.