Author: mark.murphy
Subject: Monitor file activity
Posted: 15 April 2013 at 1:40pm
If you rename a file you should see an Operation called:
SetRenameInformationFile
and the Detail column will display something like:
ReplaceIfExists: False, FileName: C:\Work\Test\newfile.txt
The Path column will contain the previous name, with the new name in the embedded in the Detail column.
Deleting the file will have an Operation of SetDispositionInformationFile with the Path column containing the filename and the Detail column containing: Delete: True
File creation is a little more contrived as it will be a series of operations:
CreateFile
WriteToFile
closeFile
plus, potentially, some others.
Subject: Monitor file activity
Posted: 15 April 2013 at 1:40pm
If you rename a file you should see an Operation called:
SetRenameInformationFile
and the Detail column will display something like:
ReplaceIfExists: False, FileName: C:\Work\Test\newfile.txt
The Path column will contain the previous name, with the new name in the embedded in the Detail column.
Deleting the file will have an Operation of SetDispositionInformationFile with the Path column containing the filename and the Detail column containing: Delete: True
File creation is a little more contrived as it will be a series of operations:
CreateFile
WriteToFile
closeFile
plus, potentially, some others.