Geek Answers Handbook

Monitoring files similar to System Internal / Microsoft FileMon / Process Monitor

I need to create an event when a file is being closed by another application.

Unfortunately, ReadDirectoryChangesW does not report a close event. Perhaps I can interrogate (using TTimer) any file that was specified by ReadDirectoryChangesW until it is closed (using CreateFile to detect it).

However, I would prefer this event-driven solution.

Is there a way to intercept system calls and detect all file close events? I just want to know the path and name of any file that has just been closed.

+5
source share
5 answers

Delphi - - .

+7

Mathias Rauens madCodeHook:

madCodeHook , ( API) 32 64- Windows Windows 95 Windows 7. , API- .

+5

, Eldos CallbackFilter:

http://www.eldos.com/cbflt/spec.php

+2

, : . , share. , , , .

, . , , .

0

Jedi LIbrary (JCL) "TJvChangeNotify", , :

  • " " = > , , !

Other things he can do:

  • Resized file
  • Changed file name ...

And, most importantly, it searches inside the folder with subdirectories if you want. Here is a link to (part of) the help file for this component: http://help.delphi-jedi.org/item.php?Id=172982

Hope this helps.

-1
source

More articles:


All Articles