someboby know how to monitor the PC?

Question

1.00/5 (3 votes)

See more:

do i need learn in ring0 or ring3?

i used ReadDirectoryChangesW ,but it did't finger out copyevent.
so neither winapi.

i also use detour,witch is in ring3,but it is so tumultuous.

and filemon```````(i only have a week to finish the job,filemon is so hard )

now what can i do```````help me ,sos!

我需要监控电脑的所有文件操作，
请不要推荐WINAPI --ReadDirectoryChangesW
和
请不要推荐filemon驱动级
我很简单就需要钩住复制和剪切新建修改等文件操作

我自己写过键盘钩子和鼠标钩子
但是如何截取文件操作的消息？
能否给个例子
谢谢了

UPDATE from OP:
i just need to know when the PC's file is copied by others,and write the event in the txt,when a file was added or modified .

i saw a good article :
CDirectoryChangeWatcher - ReadDirectoryChangesW all wrapped up[^]

but when a file was copied,it can't record.

Posted 5-May-11 19:28pm

batsword

Updated 5-May-11 19:50pm

Sandeep Mewara

v2

Add a Solution

Comments

Sergey Alexandrovich Kryukov 6-May-11 1:33am

Not comprehensible. Relax.
--SA

Smithers-Jones 6-May-11 1:44am

What does the Chinese part say? Use English, calm down, exactly describe your problem.

5 solutions

Solution 1

How can anyone know what do you need? Relax, don't get mad. If you panic like that, nothing can help you.

—SA

Posted 5-May-11 19:33pm

Sergey Alexandrovich Kryukov

Solution 4

to 2:
but for

SQL

Remote replication

when some body use 'mstsc' to link to the PC ,then copy some files,the API takes No records

Posted 5-May-11 19:50pm

batsword

Solution 6

thanks to all:
now i find 3 Solutions:

wmi

ssdt

drive

thanks!

Posted 8-May-11 17:32pm

batsword

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

barneyman · Accepted Answer · 2011-05-05T19:43:00

Solution 2

if you're looking to watch file and directory changes, have a look at http://msdn.microsoft.com/en-us/library/aa364417(v=vs.85).aspx[^]

Posted 5-May-11 19:43pm

barneyman

Legor · Accepted Answer · 2011-05-06T01:17:00

Solution 5

You can use WMI on Windows OS to monitor pretty much everything.

http://msdn.microsoft.com/en-us/library/aa394582%28v=vs.85%29.aspx[^]

Posted 6-May-11 1:17am

Legor

v2