在Windows中访问本地文件时获取通知

Question

I'd like to get notified when a specific file get accessed (AFAIK, most generally for a Userland code - by CreateFile() / NtCreateFile() )

I already know about FileSystemWatcher which should do the same within the .NET environment, But I'm working in plain C + WinAPI .

As for the type of notification , raising a specified Event would be perfect, but sending a callback to be called , will also work.

Answer 1

See FindFirstChangeNotification function in WinAPI and related links.

Alternatively, when functionality of that function is not enough, you can use a filesystem filter driver (write yours or use our CallbackFilter product).