none
test if file is modified RRS feed

  • Question

  • What would be the best way to check if a file (stream) data was changed,
    in pre-cleanup callback (using minifilter)?

    Thanks!

    Tuesday, March 10, 2015 12:11 AM

Answers

  • End of file and also valid data length.  Basically, you have to track things yourself.


    Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com

    • Marked as answer by GiantWarlord Tuesday, March 10, 2015 5:39 PM
    Tuesday, March 10, 2015 2:08 PM

All replies

  • The simplest would be to catch writes and setfileinformation calls and put a flag in the stream context. 


    Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com

    Tuesday, March 10, 2015 12:16 AM
  • Thanks,

    regarding setfileinformation, do you mean EndOfFile info only, or anything else?
    (Need to catch only if the file data was changed).

    Tuesday, March 10, 2015 1:23 AM
  • What would be the best way to check if a file (stream) data was changed,
    in pre-cleanup callback (using minifilter)?

    Thanks!


    Tuesday, March 10, 2015 2:25 AM
  • End of file and also valid data length.  Basically, you have to track things yourself.


    Don Burn Windows Filesystem and Driver Consulting Website: http://www.windrvr.com

    • Marked as answer by GiantWarlord Tuesday, March 10, 2015 5:39 PM
    Tuesday, March 10, 2015 2:08 PM